{"diffoscope-json-version": 1, "source1": "/srv/reproducible-results/rbuild-debian/r-b-build.5RunvC38/b1/scap-security-guide_0.1.78-1_arm64.changes", "source2": "/srv/reproducible-results/rbuild-debian/r-b-build.5RunvC38/b2/scap-security-guide_0.1.78-1_arm64.changes", "unified_diff": null, "details": [{"source1": "Files", "source2": "Files", "unified_diff": "@@ -1,6 +1,6 @@\n \n  9ba708400d9478b0e7b2967ff9944aee 153564 admin optional ssg-applications_0.1.78-1_all.deb\n  532111b3db0ce4886d0faa619666125b 32876 admin optional ssg-base_0.1.78-1_all.deb\n  a5083fde718989b0ace1e497373c6749 2380448 admin optional ssg-debderived_0.1.78-1_all.deb\n  65e6defd051759671bb2320f5dd7b1ec 2586744 admin optional ssg-debian_0.1.78-1_all.deb\n- 9aca9b3badfb441c5efba33c6c029426 39973184 admin optional ssg-nondebian_0.1.78-1_all.deb\n+ 6de8c02fa105f76ec603519c96a95cdf 39973352 admin optional ssg-nondebian_0.1.78-1_all.deb\n"}, {"source1": "ssg-nondebian_0.1.78-1_all.deb", "source2": "ssg-nondebian_0.1.78-1_all.deb", "unified_diff": null, "details": [{"source1": "file list", "source2": "file list", "unified_diff": "@@ -1,3 +1,3 @@\n -rw-r--r--   0        0        0        4 2025-09-12 08:13:30.000000 debian-binary\n--rw-r--r--   0        0        0    18856 2025-09-12 08:13:30.000000 control.tar.xz\n--rw-r--r--   0        0        0 39954136 2025-09-12 08:13:30.000000 data.tar.xz\n+-rw-r--r--   0        0        0    18844 2025-09-12 08:13:30.000000 control.tar.xz\n+-rw-r--r--   0        0        0 39954316 2025-09-12 08:13:30.000000 data.tar.xz\n"}, {"source1": "control.tar.xz", "source2": "control.tar.xz", "unified_diff": null, "details": [{"source1": "control.tar", "source2": "control.tar", "unified_diff": null, "details": [{"source1": "./md5sums", "source2": "./md5sums", "unified_diff": null, "details": [{"source1": "./md5sums", "source2": "./md5sums", "comments": ["Files differ"], "unified_diff": null}]}]}]}, {"source1": "data.tar.xz", "source2": "data.tar.xz", "unified_diff": null, "details": [{"source1": "data.tar", "source2": "data.tar", "unified_diff": null, "details": [{"source1": "./usr/share/doc/ssg-nondebian/table-ol7-nistrefs-stig.html", "source2": "./usr/share/doc/ssg-nondebian/table-ol7-nistrefs-stig.html", "has_internal_linenos": true, "unified_diff": "@@ -8559,18 +8559,18 @@\n 000216e0: 6b0a 616e 6420 7573 6520 7468 6520 696e  k.and use the in\n 000216f0: 666f 726d 6174 696f 6e20 746f 2070 6f74  formation to pot\n 00021700: 656e 7469 616c 6c79 2063 6f6d 7072 6f6d  entially comprom\n 00021710: 6973 6520 7468 6520 696e 7465 6772 6974  ise the integrit\n 00021720: 7920 6f66 2074 6865 2073 7973 7465 6d20  y of the system \n 00021730: 616e 640a 6e65 7477 6f72 6b28 7329 2e0a  and.network(s)..\n 00021740: 2020 3c2f 7464 3e0a 2020 3c74 643e 7661    </td>.  <td>va\n-00021750: 725f 736e 6d70 645f 7277 5f73 7472 696e  r_snmpd_rw_strin\n-00021760: 673d 6368 616e 6765 6d65 7277 3c62 722f  g=changemerw<br/\n-00021770: 3e76 6172 5f73 6e6d 7064 5f72 6f5f 7374  >var_snmpd_ro_st\n-00021780: 7269 6e67 3d63 6861 6e67 656d 6572 6f3c  ring=changemero<\n+00021750: 725f 736e 6d70 645f 726f 5f73 7472 696e  r_snmpd_ro_strin\n+00021760: 673d 6368 616e 6765 6d65 726f 3c62 722f  g=changemero<br/\n+00021770: 3e76 6172 5f73 6e6d 7064 5f72 775f 7374  >var_snmpd_rw_st\n+00021780: 7269 6e67 3d63 6861 6e67 656d 6572 773c  ring=changemerw<\n 00021790: 2f74 643e 0a3c 2f74 723e 0a3c 7472 3e0a  /td>.</tr>.<tr>.\n 000217a0: 2020 3c74 643e 5343 2d35 3c2f 7464 3e0a    <td>SC-5</td>.\n 000217b0: 2020 3c74 643e 4e2f 413c 2f74 643e 0a20    <td>N/A</td>. \n 000217c0: 203c 7464 3e43 6f6e 6669 6775 7265 204b   <td>Configure K\n 000217d0: 6572 6e65 6c20 746f 2052 6174 6520 4c69  ernel to Rate Li\n 000217e0: 6d69 7420 5365 6e64 696e 6720 6f66 2044  mit Sending of D\n 000217f0: 7570 6c69 6361 7465 2054 4350 2041 636b  uplicate TCP Ack\n", "details": [{"source1": "html2text {}", "source2": "html2text {}", "unified_diff": "@@ -2893,16 +2893,16 @@\n                                                                               network management\n                                                                               protocol (SNMP)\n                                                                               community strings\n                                                                               must be changed to\n                                   Edit /etc/snmp/snmpd.conf, remove or change maintain security.\n                                   the default community strings of public and If the service is\n                                   private. This profile configures new read-  running with the\n-        N/ Ensure Default SNMP    only community string to changemero and     default             var_snmpd_rw_string=changemerw\n-IA-5(e) A  Password Is Not Used   read-write community string to changemerw.  authenticators,     var_snmpd_ro_string=changemero\n+        N/ Ensure Default SNMP    only community string to changemero and     default             var_snmpd_ro_string=changemero\n+IA-5(e) A  Password Is Not Used   read-write community string to changemerw.  authenticators,     var_snmpd_rw_string=changemerw\n                                   Once the default community strings have     then anyone can\n                                   been changed, restart the SNMP service:     gather data about\n                                   $ sudo systemctl restart snmpd              the system and the\n                                                                               network and use the\n                                                                               information to\n                                                                               potentially\n                                                                               compromise the\n"}]}, {"source1": "./usr/share/doc/ssg-nondebian/table-ol8-nistrefs-stig.html", "source2": "./usr/share/doc/ssg-nondebian/table-ol8-nistrefs-stig.html", "has_internal_linenos": true, "unified_diff": "@@ -24012,17 +24012,17 @@\n 0005dcb0: 6c69 6e67 0a74 696d 652d 6261 7365 6420  ling.time-based \n 0005dcc0: 6c69 6d69 742c 2065 6666 6563 7473 206f  limit, effects o\n 0005dcd0: 6620 706f 7465 6e74 6961 6c20 6174 7461  f potential atta\n 0005dce0: 636b 7320 6167 6169 6e73 740a 656e 6372  cks against.encr\n 0005dcf0: 7970 7469 6f6e 206b 6579 7320 6172 6520  yption keys are \n 0005dd00: 6c69 6d69 7465 642e 0a20 203c 2f74 643e  limited..  </td>\n 0005dd10: 0a20 203c 7464 3e76 6172 5f72 656b 6579  .  <td>var_rekey\n-0005dd20: 5f6c 696d 6974 5f73 697a 653d 3147 3c62  _limit_size=1G<b\n-0005dd30: 722f 3e76 6172 5f72 656b 6579 5f6c 696d  r/>var_rekey_lim\n-0005dd40: 6974 5f74 696d 653d 3168 6f75 723c 2f74  it_time=1hour</t\n+0005dd20: 5f6c 696d 6974 5f74 696d 653d 3168 6f75  _limit_time=1hou\n+0005dd30: 723c 6272 2f3e 7661 725f 7265 6b65 795f  r<br/>var_rekey_\n+0005dd40: 6c69 6d69 745f 7369 7a65 3d31 473c 2f74  limit_size=1G</t\n 0005dd50: 643e 0a3c 2f74 723e 0a3c 7472 3e0a 2020  d>.</tr>.<tr>.  \n 0005dd60: 3c74 643e 3c2f 7464 3e0a 2020 3c74 643e  <td></td>.  <td>\n 0005dd70: 4e2f 413c 2f74 643e 0a20 203c 7464 3e53  N/A</td>.  <td>S\n 0005dd80: 5348 2073 6572 7665 7220 7573 6573 2073  SH server uses s\n 0005dd90: 7472 6f6e 6720 656e 7472 6f70 7920 746f  trong entropy to\n 0005dda0: 2073 6565 643c 2f74 643e 0a20 203c 7464   seed</td>.  <td\n 0005ddb0: 2078 6d6c 3a6c 616e 673d 2265 6e2d 5553   xml:lang=\"en-US\n", "details": [{"source1": "html2text {}", "source2": "html2text {}", "unified_diff": "@@ -7629,16 +7629,16 @@\n                                  private key.                                          system where the\n                                                                                        associated public\n                                                                                        key has been\n                                                                                        installed.\n                                  The RekeyLimit parameter specifies how often the      By decreasing the\n                                  session key of the is renegotiated, both in terms of  limit based on the\n            Force frequent        amount of data that may be transmitted and the time   amount of data and\n-        N/ session key           elapsed.                                              enabling time-based var_rekey_limit_size=1G\n-        A  renegotiation         To decrease the default limits, add or correct the    limit, effects of   var_rekey_limit_time=1hour\n+        N/ session key           elapsed.                                              enabling time-based var_rekey_limit_time=1hour\n+        A  renegotiation         To decrease the default limits, add or correct the    limit, effects of   var_rekey_limit_size=1G\n                                  following line in /etc/ssh/sshd_config:               potential attacks\n                                  RekeyLimit 1G 1hour                                   against encryption\n                                                                                        keys are limited.\n                                                                                        SSH implementation\n                                                                                        in Oracle Linux 8\n                                                                                        uses the openssl\n                                                                                        library, which\n"}]}, {"source1": "./usr/share/doc/ssg-nondebian/table-rhel8-nistrefs-stig.html", "source2": "./usr/share/doc/ssg-nondebian/table-rhel8-nistrefs-stig.html", "has_internal_linenos": true, "unified_diff": "@@ -24516,17 +24516,17 @@\n 0005fc30: 6c69 6e67 0a74 696d 652d 6261 7365 6420  ling.time-based \n 0005fc40: 6c69 6d69 742c 2065 6666 6563 7473 206f  limit, effects o\n 0005fc50: 6620 706f 7465 6e74 6961 6c20 6174 7461  f potential atta\n 0005fc60: 636b 7320 6167 6169 6e73 740a 656e 6372  cks against.encr\n 0005fc70: 7970 7469 6f6e 206b 6579 7320 6172 6520  yption keys are \n 0005fc80: 6c69 6d69 7465 642e 0a20 203c 2f74 643e  limited..  </td>\n 0005fc90: 0a20 203c 7464 3e76 6172 5f72 656b 6579  .  <td>var_rekey\n-0005fca0: 5f6c 696d 6974 5f74 696d 653d 3168 6f75  _limit_time=1hou\n-0005fcb0: 723c 6272 2f3e 7661 725f 7265 6b65 795f  r<br/>var_rekey_\n-0005fcc0: 6c69 6d69 745f 7369 7a65 3d31 473c 2f74  limit_size=1G</t\n+0005fca0: 5f6c 696d 6974 5f73 697a 653d 3147 3c62  _limit_size=1G<b\n+0005fcb0: 722f 3e76 6172 5f72 656b 6579 5f6c 696d  r/>var_rekey_lim\n+0005fcc0: 6974 5f74 696d 653d 3168 6f75 723c 2f74  it_time=1hour</t\n 0005fcd0: 643e 0a3c 2f74 723e 0a3c 7472 3e0a 2020  d>.</tr>.<tr>.  \n 0005fce0: 3c74 643e 3c2f 7464 3e0a 2020 3c74 643e  <td></td>.  <td>\n 0005fcf0: 4343 452d 3832 3436 322d 333c 2f74 643e  CCE-82462-3</td>\n 0005fd00: 0a20 203c 7464 3e53 5348 2073 6572 7665  .  <td>SSH serve\n 0005fd10: 7220 7573 6573 2073 7472 6f6e 6720 656e  r uses strong en\n 0005fd20: 7472 6f70 7920 746f 2073 6565 643c 2f74  tropy to seed</t\n 0005fd30: 643e 0a20 203c 7464 2078 6d6c 3a6c 616e  d>.  <td xml:lan\n", "details": [{"source1": "html2text {}", "source2": "html2text {}", "unified_diff": "@@ -7638,16 +7638,16 @@\n                                      corresponding private key.                            system where the\n                                                                                            associated public\n                                                                                            key has been\n                                                                                            installed.\n                                      The RekeyLimit parameter specifies how often the      By decreasing the\n                                      session key of the is renegotiated, both in terms of  limit based on the\n         CCE-   Force frequent        amount of data that may be transmitted and the time   amount of data and\n-        82177- session key           elapsed.                                              enabling time-based var_rekey_limit_time=1hour\n-        7      renegotiation         To decrease the default limits, add or correct the    limit, effects of   var_rekey_limit_size=1G\n+        82177- session key           elapsed.                                              enabling time-based var_rekey_limit_size=1G\n+        7      renegotiation         To decrease the default limits, add or correct the    limit, effects of   var_rekey_limit_time=1hour\n                                      following line in /etc/ssh/sshd_config:               potential attacks\n                                      RekeyLimit 1G 1hour                                   against encryption\n                                                                                            keys are limited.\n                                                                                            SSH implementation\n                                                                                            in Red Hat\n                                                                                            Enterprise Linux 8\n                                                                                            uses the openssl\n"}]}, {"source1": "./usr/share/scap-security-guide/tailoring/ol8_stig_delta_tailoring.xml", "source2": "./usr/share/scap-security-guide/tailoring/ol8_stig_delta_tailoring.xml", "unified_diff": null, "details": [{"source1": "./usr/share/scap-security-guide/tailoring/ol8_stig_delta_tailoring.xml", "source2": "./usr/share/scap-security-guide/tailoring/ol8_stig_delta_tailoring.xml", "unified_diff": "@@ -1,10 +1,10 @@\n <?xml version=\"1.0\" encoding=\"utf-8\"?>\n <xccdf-1.2:Tailoring xmlns:xccdf-1.2=\"http://checklists.nist.gov/xccdf/1.2\" id=\"xccdf_content-disa-delta_tailoring_default\">\n-  <xccdf-1.2:version time=\"2025-09-11T20:13:30\">1</xccdf-1.2:version>\n+  <xccdf-1.2:version time=\"2025-09-12T22:13:30\">1</xccdf-1.2:version>\n   <xccdf-1.2:Profile id=\"xccdf_org.ssgproject.content_profile_stig_delta_tailoring\" extends=\"xccdf_org.ssgproject.content_profile_stig\">\n     <xccdf-1.2:title override=\"true\">DISA STIG for Oracle Linux 8</xccdf-1.2:title>\n     <xccdf-1.2:description override=\"true\">This profile contains configuration checks that align to the\n DISA STIG for Oracle Linux 8 V2R4.</xccdf-1.2:description>\n     <xccdf-1.2:select idref=\"xccdf_org.ssgproject.content_rule_account_disable_inactivity_password_auth\" selected=\"false\"/>\n     <xccdf-1.2:select idref=\"xccdf_org.ssgproject.content_rule_account_disable_inactivity_system_auth\" selected=\"false\"/>\n     <xccdf-1.2:select idref=\"xccdf_org.ssgproject.content_rule_account_disable_post_pw_expiration\" selected=\"false\"/>\n"}]}, {"source1": "./usr/share/scap-security-guide/tailoring/rhel8_stig_delta_tailoring.xml", "source2": "./usr/share/scap-security-guide/tailoring/rhel8_stig_delta_tailoring.xml", "unified_diff": null, "details": [{"source1": "./usr/share/scap-security-guide/tailoring/rhel8_stig_delta_tailoring.xml", "source2": "./usr/share/scap-security-guide/tailoring/rhel8_stig_delta_tailoring.xml", "unified_diff": "@@ -1,10 +1,10 @@\n <?xml version=\"1.0\" encoding=\"utf-8\"?>\n <xccdf-1.2:Tailoring xmlns:xccdf-1.2=\"http://checklists.nist.gov/xccdf/1.2\" id=\"xccdf_content-disa-delta_tailoring_default\">\n-  <xccdf-1.2:version time=\"2025-09-11T20:13:30\">1</xccdf-1.2:version>\n+  <xccdf-1.2:version time=\"2025-09-12T22:13:30\">1</xccdf-1.2:version>\n   <xccdf-1.2:Profile id=\"xccdf_org.ssgproject.content_profile_stig_delta_tailoring\" extends=\"xccdf_org.ssgproject.content_profile_stig\">\n     <xccdf-1.2:title override=\"true\">DISA STIG for Red Hat Enterprise Linux 8</xccdf-1.2:title>\n     <xccdf-1.2:description override=\"true\">This profile contains configuration checks that align to the\n DISA STIG for Red Hat Enterprise Linux 8 V2R4.\n \n In addition to being applicable to Red Hat Enterprise Linux 8, this\n configuration baseline is applicable to the operating system tier of\n"}]}]}]}]}]}