-
Notifications
You must be signed in to change notification settings - Fork 17
/
main.yml
964 lines (964 loc) · 35.2 KB
/
main.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
---
# defaults file for rhel9_stig
var_aide_scan_notification_email: root@localhost
var_system_crypto_policy: FIPS
inactivity_timeout_value: '900'
var_screensaver_lock_delay: '0'
var_sudo_timestamp_timeout: '5'
var_authselect_profile: sssd
login_banner_text: ^(You[\s\n]+are[\s\n]+accessing[\s\n]+a[\s\n]+U\.S\.[\s\n]+Government[\s\n]+\(USG\)[\s\n]+Information[\s\n]+System[\s\n]+\(IS\)[\s\n]+that[\s\n]+is[\s\n]+provided[\s\n]+for[\s\n]+USG\-authorized[\s\n]+use[\s\n]+only\.[\s\n]+By[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+\(which[\s\n]+includes[\s\n]+any[\s\n]+device[\s\n]+attached[\s\n]+to[\s\n]+this[\s\n]+IS\),[\s\n]+you[\s\n]+consent[\s\n]+to[\s\n]+the[\s\n]+following[\s\n]+conditions\:(?:[\n]+|(?:\\n)+)\-The[\s\n]+USG[\s\n]+routinely[\s\n]+intercepts[\s\n]+and[\s\n]+monitors[\s\n]+communications[\s\n]+on[\s\n]+this[\s\n]+IS[\s\n]+for[\s\n]+purposes[\s\n]+including,[\s\n]+but[\s\n]+not[\s\n]+limited[\s\n]+to,[\s\n]+penetration[\s\n]+testing,[\s\n]+COMSEC[\s\n]+monitoring,[\s\n]+network[\s\n]+operations[\s\n]+and[\s\n]+defense,[\s\n]+personnel[\s\n]+misconduct[\s\n]+\(PM\),[\s\n]+law[\s\n]+enforcement[\s\n]+\(LE\),[\s\n]+and[\s\n]+counterintelligence[\s\n]+\(CI\)[\s\n]+investigations\.(?:[\n]+|(?:\\n)+)\-At[\s\n]+any[\s\n]+time,[\s\n]+the[\s\n]+USG[\s\n]+may[\s\n]+inspect[\s\n]+and[\s\n]+seize[\s\n]+data[\s\n]+stored[\s\n]+on[\s\n]+this[\s\n]+IS\.(?:[\n]+|(?:\\n)+)\-Communications[\s\n]+using,[\s\n]+or[\s\n]+data[\s\n]+stored[\s\n]+on,[\s\n]+this[\s\n]+IS[\s\n]+are[\s\n]+not[\s\n]+private,[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+routine[\s\n]+monitoring,[\s\n]+interception,[\s\n]+and[\s\n]+search,[\s\n]+and[\s\n]+may[\s\n]+be[\s\n]+disclosed[\s\n]+or[\s\n]+used[\s\n]+for[\s\n]+any[\s\n]+USG\-authorized[\s\n]+purpose\.(?:[\n]+|(?:\\n)+)\-This[\s\n]+IS[\s\n]+includes[\s\n]+security[\s\n]+measures[\s\n]+\(e\.g\.,[\s\n]+authentication[\s\n]+and[\s\n]+access[\s\n]+controls\)[\s\n]+to[\s\n]+protect[\s\n]+USG[\s\n]+interests\-\-not[\s\n]+for[\s\n]+your[\s\n]+personal[\s\n]+benefit[\s\n]+or[\s\n]+privacy\.(?:[\n]+|(?:\\n)+)\-Notwithstanding[\s\n]+the[\s\n]+above,[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+does[\s\n]+not[\s\n]+constitute[\s\n]+consent[\s\n]+to[\s\n]+PM,[\s\n]+LE[\s\n]+or[\s\n]+CI[\s\n]+investigative[\s\n]+searching[\s\n]+or[\s\n]+monitoring[\s\n]+of[\s\n]+the[\s\n]+content[\s\n]+of[\s\n]+privileged[\s\n]+communications,[\s\n]+or[\s\n]+work[\s\n]+product,[\s\n]+related[\s\n]+to[\s\n]+personal[\s\n]+representation[\s\n]+or[\s\n]+services[\s\n]+by[\s\n]+attorneys,[\s\n]+psychotherapists,[\s\n]+or[\s\n]+clergy,[\s\n]+and[\s\n]+their[\s\n]+assistants\.[\s\n]+Such[\s\n]+communications[\s\n]+and[\s\n]+work[\s\n]+product[\s\n]+are[\s\n]+private[\s\n]+and[\s\n]+confidential\.[\s\n]+See[\s\n]+User[\s\n]+Agreement[\s\n]+for[\s\n]+details\.|I've[\s\n]+read[\s\n]+\&[\s\n]+consent[\s\n]+to[\s\n]+terms[\s\n]+in[\s\n]+IS[\s\n]+user[\s\n]+agreem't\.)$
var_password_pam_remember: '5'
var_password_pam_remember_control_flag: requisite,required
var_accounts_passwords_pam_faillock_deny: '3'
var_accounts_passwords_pam_faillock_dir: /var/log/faillock
var_accounts_passwords_pam_faillock_fail_interval: '900'
var_accounts_passwords_pam_faillock_unlock_time: '0'
var_password_pam_dcredit: '-1'
var_password_pam_dictcheck: '1'
var_password_pam_difok: '8'
var_password_pam_lcredit: '-1'
var_password_pam_maxclassrepeat: '4'
var_password_pam_maxrepeat: '3'
var_password_pam_minclass: '4'
var_password_pam_minlen: '15'
var_password_pam_ocredit: '-1'
var_password_pam_retry: '3'
var_password_pam_ucredit: '-1'
var_password_hashing_algorithm: SHA512
var_logind_session_timeout: '900'
var_smartcard_drivers: cac
var_account_disable_post_pw_expiration: '35'
var_accounts_maximum_age_login_defs: '60'
var_accounts_minimum_age_login_defs: '1'
var_accounts_password_minlen_login_defs: '15'
var_password_pam_unix_rounds: '5000'
var_accounts_fail_delay: '4'
var_accounts_max_concurrent_login_sessions: '10'
var_accounts_tmout: '600'
var_user_initialization_files_regex: ^(\.bashrc|\.zshrc|\.cshrc|\.profile|\.bash_login|\.bash_profile)$
var_accounts_user_umask: '077'
var_audit_failure_mode: '2'
var_auditd_disk_error_action: halt
var_auditd_disk_full_action: halt
var_auditd_action_mail_acct: root
var_auditd_admin_space_left_action: halt
var_auditd_admin_space_left_percentage: '5'
var_auditd_max_log_file_action: rotate
var_auditd_space_left_action: email
var_auditd_space_left_percentage: '25'
var_auditd_name_format: hostname|fqd|numeric
rsyslog_remote_loghost_address: logcollector
sysctl_net_ipv6_conf_all_accept_ra_value: '0'
sysctl_net_ipv6_conf_all_accept_redirects_value: '0'
sysctl_net_ipv6_conf_all_accept_source_route_value: '0'
sysctl_net_ipv6_conf_all_forwarding_value: '0'
sysctl_net_ipv6_conf_default_accept_ra_value: '0'
sysctl_net_ipv6_conf_default_accept_redirects_value: '0'
sysctl_net_ipv6_conf_default_accept_source_route_value: '0'
sysctl_net_ipv4_conf_all_accept_redirects_value: '0'
sysctl_net_ipv4_conf_all_accept_source_route_value: '0'
sysctl_net_ipv4_conf_all_forwarding_value: '0'
sysctl_net_ipv4_conf_all_log_martians_value: '1'
sysctl_net_ipv4_conf_all_rp_filter_value: '1'
sysctl_net_ipv4_conf_default_accept_redirects_value: '0'
sysctl_net_ipv4_conf_default_accept_source_route_value: '0'
sysctl_net_ipv4_conf_default_log_martians_value: '1'
sysctl_net_ipv4_conf_default_rp_filter_value: '1'
sysctl_net_ipv4_icmp_echo_ignore_broadcasts_value: '1'
sysctl_net_ipv4_icmp_ignore_bogus_error_responses_value: '1'
sysctl_net_ipv4_tcp_syncookies_value: '1'
var_networkmanager_dns_mode: none
var_removable_partition: /dev/cdrom
sysctl_kernel_kptr_restrict_value: '1'
var_slub_debug_options: P
var_selinux_policy_name: targeted
var_selinux_state: enforcing
var_postfix_root_mail_alias: change_me@localhost
var_time_service_set_maxpoll: '16'
var_tftpd_secure_directory: /var/lib/tftpboot
var_sshd_set_keepalive: '1'
sshd_idle_timeout_value: '600'
firewalld_sshd_zone: public
var_sshd_disable_compression: 'no'
var_rekey_limit_size: 1G
var_rekey_limit_time: 1h
var_sshd_priv_separation: sandbox
var_sssd_certificate_verification_digest_function: sha512
DISA_STIG_RHEL_09_211015: true
DISA_STIG_RHEL_09_211020: true
DISA_STIG_RHEL_09_211030: true
DISA_STIG_RHEL_09_211040: true
DISA_STIG_RHEL_09_211045: true
DISA_STIG_RHEL_09_211050: true
DISA_STIG_RHEL_09_211055: true
DISA_STIG_RHEL_09_212015: true
DISA_STIG_RHEL_09_212025: true
DISA_STIG_RHEL_09_212030: true
DISA_STIG_RHEL_09_212035: true
DISA_STIG_RHEL_09_212040: true
DISA_STIG_RHEL_09_212045: true
DISA_STIG_RHEL_09_212050: true
DISA_STIG_RHEL_09_212055: true
DISA_STIG_RHEL_09_213010: true
DISA_STIG_RHEL_09_213015: true
DISA_STIG_RHEL_09_213020: true
DISA_STIG_RHEL_09_213025: true
DISA_STIG_RHEL_09_213030: true
DISA_STIG_RHEL_09_213035: true
DISA_STIG_RHEL_09_213040: true
DISA_STIG_RHEL_09_213045: true
DISA_STIG_RHEL_09_213050: true
DISA_STIG_RHEL_09_213055: true
DISA_STIG_RHEL_09_213060: true
DISA_STIG_RHEL_09_213065: true
DISA_STIG_RHEL_09_213070: true
DISA_STIG_RHEL_09_213075: true
DISA_STIG_RHEL_09_213080: true
DISA_STIG_RHEL_09_213085: true
DISA_STIG_RHEL_09_213090: true
DISA_STIG_RHEL_09_213095: true
DISA_STIG_RHEL_09_213100: true
DISA_STIG_RHEL_09_213105: true
DISA_STIG_RHEL_09_213110: true
DISA_STIG_RHEL_09_213115: true
DISA_STIG_RHEL_09_214010: true
DISA_STIG_RHEL_09_214015: true
DISA_STIG_RHEL_09_214020: true
DISA_STIG_RHEL_09_214025: true
DISA_STIG_RHEL_09_214035: true
DISA_STIG_RHEL_09_215010: true
DISA_STIG_RHEL_09_215015: true
DISA_STIG_RHEL_09_215020: true
DISA_STIG_RHEL_09_215025: true
DISA_STIG_RHEL_09_215030: true
DISA_STIG_RHEL_09_215035: true
DISA_STIG_RHEL_09_215040: true
DISA_STIG_RHEL_09_215045: true
DISA_STIG_RHEL_09_215050: true
DISA_STIG_RHEL_09_215055: true
DISA_STIG_RHEL_09_215060: true
DISA_STIG_RHEL_09_215065: true
DISA_STIG_RHEL_09_215075: true
DISA_STIG_RHEL_09_215080: true
DISA_STIG_RHEL_09_215085: true
DISA_STIG_RHEL_09_215090: true
DISA_STIG_RHEL_09_215095: true
DISA_STIG_RHEL_09_231040: true
DISA_STIG_RHEL_09_231045: true
DISA_STIG_RHEL_09_231050: true
DISA_STIG_RHEL_09_231055: true
DISA_STIG_RHEL_09_231060: true
DISA_STIG_RHEL_09_231065: true
DISA_STIG_RHEL_09_231070: true
DISA_STIG_RHEL_09_231075: true
DISA_STIG_RHEL_09_231080: true
DISA_STIG_RHEL_09_231085: true
DISA_STIG_RHEL_09_231090: true
DISA_STIG_RHEL_09_231095: true
DISA_STIG_RHEL_09_231100: true
DISA_STIG_RHEL_09_231105: true
DISA_STIG_RHEL_09_231110: true
DISA_STIG_RHEL_09_231115: true
DISA_STIG_RHEL_09_231120: true
DISA_STIG_RHEL_09_231125: true
DISA_STIG_RHEL_09_231130: true
DISA_STIG_RHEL_09_231135: true
DISA_STIG_RHEL_09_231140: true
DISA_STIG_RHEL_09_231145: true
DISA_STIG_RHEL_09_231150: true
DISA_STIG_RHEL_09_231155: true
DISA_STIG_RHEL_09_231160: true
DISA_STIG_RHEL_09_231165: true
DISA_STIG_RHEL_09_231170: true
DISA_STIG_RHEL_09_231175: true
DISA_STIG_RHEL_09_231180: true
DISA_STIG_RHEL_09_231185: true
DISA_STIG_RHEL_09_231195: true
DISA_STIG_RHEL_09_231200: true
DISA_STIG_RHEL_09_232010: true
DISA_STIG_RHEL_09_232015: true
DISA_STIG_RHEL_09_232020: true
DISA_STIG_RHEL_09_232025: true
DISA_STIG_RHEL_09_232030: true
DISA_STIG_RHEL_09_232035: true
DISA_STIG_RHEL_09_232040: true
DISA_STIG_RHEL_09_232045: true
DISA_STIG_RHEL_09_232050: true
DISA_STIG_RHEL_09_232055: true
DISA_STIG_RHEL_09_232060: true
DISA_STIG_RHEL_09_232065: true
DISA_STIG_RHEL_09_232070: true
DISA_STIG_RHEL_09_232075: true
DISA_STIG_RHEL_09_232080: true
DISA_STIG_RHEL_09_232085: true
DISA_STIG_RHEL_09_232090: true
DISA_STIG_RHEL_09_232095: true
DISA_STIG_RHEL_09_232100: true
DISA_STIG_RHEL_09_232105: true
DISA_STIG_RHEL_09_232110: true
DISA_STIG_RHEL_09_232115: true
DISA_STIG_RHEL_09_232120: true
DISA_STIG_RHEL_09_232125: true
DISA_STIG_RHEL_09_232130: true
DISA_STIG_RHEL_09_232135: true
DISA_STIG_RHEL_09_232140: true
DISA_STIG_RHEL_09_232145: true
DISA_STIG_RHEL_09_232150: true
DISA_STIG_RHEL_09_232155: true
DISA_STIG_RHEL_09_232160: true
DISA_STIG_RHEL_09_232165: true
DISA_STIG_RHEL_09_232170: true
DISA_STIG_RHEL_09_232175: true
DISA_STIG_RHEL_09_232180: true
DISA_STIG_RHEL_09_232185: true
DISA_STIG_RHEL_09_232190: true
DISA_STIG_RHEL_09_232195: true
DISA_STIG_RHEL_09_232200: true
DISA_STIG_RHEL_09_232205: true
DISA_STIG_RHEL_09_232210: true
DISA_STIG_RHEL_09_232215: true
DISA_STIG_RHEL_09_232220: true
DISA_STIG_RHEL_09_232225: true
DISA_STIG_RHEL_09_232230: true
DISA_STIG_RHEL_09_232235: true
DISA_STIG_RHEL_09_232240: true
DISA_STIG_RHEL_09_232245: true
DISA_STIG_RHEL_09_232265: true
DISA_STIG_RHEL_09_232270: true
DISA_STIG_RHEL_09_251010: true
DISA_STIG_RHEL_09_251015: true
DISA_STIG_RHEL_09_251030: true
DISA_STIG_RHEL_09_251035: true
DISA_STIG_RHEL_09_251040: true
DISA_STIG_RHEL_09_251045: true
DISA_STIG_RHEL_09_252010: true
DISA_STIG_RHEL_09_252015: true
DISA_STIG_RHEL_09_252020: true
DISA_STIG_RHEL_09_252025: true
DISA_STIG_RHEL_09_252030: true
DISA_STIG_RHEL_09_252040: true
DISA_STIG_RHEL_09_252050: true
DISA_STIG_RHEL_09_252055: true
DISA_STIG_RHEL_09_252060: true
DISA_STIG_RHEL_09_252065: true
DISA_STIG_RHEL_09_252070: true
DISA_STIG_RHEL_09_252075: true
DISA_STIG_RHEL_09_253010: true
DISA_STIG_RHEL_09_253015: true
DISA_STIG_RHEL_09_253020: true
DISA_STIG_RHEL_09_253025: true
DISA_STIG_RHEL_09_253030: true
DISA_STIG_RHEL_09_253035: true
DISA_STIG_RHEL_09_253040: true
DISA_STIG_RHEL_09_253045: true
DISA_STIG_RHEL_09_253050: true
DISA_STIG_RHEL_09_253055: true
DISA_STIG_RHEL_09_253060: true
DISA_STIG_RHEL_09_253065: true
DISA_STIG_RHEL_09_253070: true
DISA_STIG_RHEL_09_253075: true
DISA_STIG_RHEL_09_254010: true
DISA_STIG_RHEL_09_254015: true
DISA_STIG_RHEL_09_254020: true
DISA_STIG_RHEL_09_254025: true
DISA_STIG_RHEL_09_254030: true
DISA_STIG_RHEL_09_254035: true
DISA_STIG_RHEL_09_254040: true
DISA_STIG_RHEL_09_255010: true
DISA_STIG_RHEL_09_255015: true
DISA_STIG_RHEL_09_255020: true
DISA_STIG_RHEL_09_255025: true
DISA_STIG_RHEL_09_255030: true
DISA_STIG_RHEL_09_255035: true
DISA_STIG_RHEL_09_255040: true
DISA_STIG_RHEL_09_255045: true
DISA_STIG_RHEL_09_255050: true
DISA_STIG_RHEL_09_255055: true
DISA_STIG_RHEL_09_255080: true
DISA_STIG_RHEL_09_255085: true
DISA_STIG_RHEL_09_255090: true
DISA_STIG_RHEL_09_255095: true
DISA_STIG_RHEL_09_255100: true
DISA_STIG_RHEL_09_255105: true
DISA_STIG_RHEL_09_255110: true
DISA_STIG_RHEL_09_255115: true
DISA_STIG_RHEL_09_255120: true
DISA_STIG_RHEL_09_255125: true
DISA_STIG_RHEL_09_255130: true
DISA_STIG_RHEL_09_255135: true
DISA_STIG_RHEL_09_255140: true
DISA_STIG_RHEL_09_255145: true
DISA_STIG_RHEL_09_255150: true
DISA_STIG_RHEL_09_255155: true
DISA_STIG_RHEL_09_255160: true
DISA_STIG_RHEL_09_255165: true
DISA_STIG_RHEL_09_255170: true
DISA_STIG_RHEL_09_255175: true
DISA_STIG_RHEL_09_271010: true
DISA_STIG_RHEL_09_271015: true
DISA_STIG_RHEL_09_271020: true
DISA_STIG_RHEL_09_271025: true
DISA_STIG_RHEL_09_271030: true
DISA_STIG_RHEL_09_271035: true
DISA_STIG_RHEL_09_271040: true
DISA_STIG_RHEL_09_271045: true
DISA_STIG_RHEL_09_271050: true
DISA_STIG_RHEL_09_271055: true
DISA_STIG_RHEL_09_271060: true
DISA_STIG_RHEL_09_271065: true
DISA_STIG_RHEL_09_271070: true
DISA_STIG_RHEL_09_271075: true
DISA_STIG_RHEL_09_271080: true
DISA_STIG_RHEL_09_271085: true
DISA_STIG_RHEL_09_271090: true
DISA_STIG_RHEL_09_271095: true
DISA_STIG_RHEL_09_271100: true
DISA_STIG_RHEL_09_271105: true
DISA_STIG_RHEL_09_271110: true
DISA_STIG_RHEL_09_271115: true
DISA_STIG_RHEL_09_291010: true
DISA_STIG_RHEL_09_291015: true
DISA_STIG_RHEL_09_291020: true
DISA_STIG_RHEL_09_291030: true
DISA_STIG_RHEL_09_291035: true
DISA_STIG_RHEL_09_291040: true
DISA_STIG_RHEL_09_411010: true
DISA_STIG_RHEL_09_411015: true
DISA_STIG_RHEL_09_411020: true
DISA_STIG_RHEL_09_411025: true
DISA_STIG_RHEL_09_411035: true
DISA_STIG_RHEL_09_411050: true
DISA_STIG_RHEL_09_411060: true
DISA_STIG_RHEL_09_411065: true
DISA_STIG_RHEL_09_411070: true
DISA_STIG_RHEL_09_411075: true
DISA_STIG_RHEL_09_411080: true
DISA_STIG_RHEL_09_411085: true
DISA_STIG_RHEL_09_411090: true
DISA_STIG_RHEL_09_411100: true
DISA_STIG_RHEL_09_411105: true
DISA_STIG_RHEL_09_412010: true
DISA_STIG_RHEL_09_412015: true
DISA_STIG_RHEL_09_412020: true
DISA_STIG_RHEL_09_412025: true
DISA_STIG_RHEL_09_412035: true
DISA_STIG_RHEL_09_412040: true
DISA_STIG_RHEL_09_412045: true
DISA_STIG_RHEL_09_412050: true
DISA_STIG_RHEL_09_412055: true
DISA_STIG_RHEL_09_412060: true
DISA_STIG_RHEL_09_412065: true
DISA_STIG_RHEL_09_412070: true
DISA_STIG_RHEL_09_412075: true
DISA_STIG_RHEL_09_412080: true
DISA_STIG_RHEL_09_431010: true
DISA_STIG_RHEL_09_431015: true
DISA_STIG_RHEL_09_431025: true
DISA_STIG_RHEL_09_431030: true
DISA_STIG_RHEL_09_432010: true
DISA_STIG_RHEL_09_432015: true
DISA_STIG_RHEL_09_432020: true
DISA_STIG_RHEL_09_432025: true
DISA_STIG_RHEL_09_432035: true
DISA_STIG_RHEL_09_433010: true
DISA_STIG_RHEL_09_433015: true
DISA_STIG_RHEL_09_611010: true
DISA_STIG_RHEL_09_611015: true
DISA_STIG_RHEL_09_611020: true
DISA_STIG_RHEL_09_611025: true
DISA_STIG_RHEL_09_611040: true
DISA_STIG_RHEL_09_611045: true
DISA_STIG_RHEL_09_611050: true
DISA_STIG_RHEL_09_611055: true
DISA_STIG_RHEL_09_611060: true
DISA_STIG_RHEL_09_611065: true
DISA_STIG_RHEL_09_611070: true
DISA_STIG_RHEL_09_611075: true
DISA_STIG_RHEL_09_611080: true
DISA_STIG_RHEL_09_611085: true
DISA_STIG_RHEL_09_611090: true
DISA_STIG_RHEL_09_611095: true
DISA_STIG_RHEL_09_611100: true
DISA_STIG_RHEL_09_611105: true
DISA_STIG_RHEL_09_611110: true
DISA_STIG_RHEL_09_611115: true
DISA_STIG_RHEL_09_611120: true
DISA_STIG_RHEL_09_611125: true
DISA_STIG_RHEL_09_611130: true
DISA_STIG_RHEL_09_611135: true
DISA_STIG_RHEL_09_611140: true
DISA_STIG_RHEL_09_611145: true
DISA_STIG_RHEL_09_611150: true
DISA_STIG_RHEL_09_611155: true
DISA_STIG_RHEL_09_611160: true
DISA_STIG_RHEL_09_611165: true
DISA_STIG_RHEL_09_611170: true
DISA_STIG_RHEL_09_611175: true
DISA_STIG_RHEL_09_611180: true
DISA_STIG_RHEL_09_611185: true
DISA_STIG_RHEL_09_611195: true
DISA_STIG_RHEL_09_611200: true
DISA_STIG_RHEL_09_611205: true
DISA_STIG_RHEL_09_631020: true
DISA_STIG_RHEL_09_651010: true
DISA_STIG_RHEL_09_651015: true
DISA_STIG_RHEL_09_651025: true
DISA_STIG_RHEL_09_651030: true
DISA_STIG_RHEL_09_651035: true
DISA_STIG_RHEL_09_652010: true
DISA_STIG_RHEL_09_652015: true
DISA_STIG_RHEL_09_652020: true
DISA_STIG_RHEL_09_652025: true
DISA_STIG_RHEL_09_652030: true
DISA_STIG_RHEL_09_652035: true
DISA_STIG_RHEL_09_652040: true
DISA_STIG_RHEL_09_652045: true
DISA_STIG_RHEL_09_652050: true
DISA_STIG_RHEL_09_652055: true
DISA_STIG_RHEL_09_653010: true
DISA_STIG_RHEL_09_653015: true
DISA_STIG_RHEL_09_653020: true
DISA_STIG_RHEL_09_653025: true
DISA_STIG_RHEL_09_653035: true
DISA_STIG_RHEL_09_653040: true
DISA_STIG_RHEL_09_653045: true
DISA_STIG_RHEL_09_653050: true
DISA_STIG_RHEL_09_653055: true
DISA_STIG_RHEL_09_653060: true
DISA_STIG_RHEL_09_653065: true
DISA_STIG_RHEL_09_653070: true
DISA_STIG_RHEL_09_653075: true
DISA_STIG_RHEL_09_653080: true
DISA_STIG_RHEL_09_653085: true
DISA_STIG_RHEL_09_653090: true
DISA_STIG_RHEL_09_653095: true
DISA_STIG_RHEL_09_653100: true
DISA_STIG_RHEL_09_653105: true
DISA_STIG_RHEL_09_653110: true
DISA_STIG_RHEL_09_653115: true
DISA_STIG_RHEL_09_653120: true
DISA_STIG_RHEL_09_653125: true
DISA_STIG_RHEL_09_653130: true
DISA_STIG_RHEL_09_654010: true
DISA_STIG_RHEL_09_654015: true
DISA_STIG_RHEL_09_654020: true
DISA_STIG_RHEL_09_654025: true
DISA_STIG_RHEL_09_654030: true
DISA_STIG_RHEL_09_654035: true
DISA_STIG_RHEL_09_654040: true
DISA_STIG_RHEL_09_654045: true
DISA_STIG_RHEL_09_654050: true
DISA_STIG_RHEL_09_654055: true
DISA_STIG_RHEL_09_654060: true
DISA_STIG_RHEL_09_654065: true
DISA_STIG_RHEL_09_654070: true
DISA_STIG_RHEL_09_654075: true
DISA_STIG_RHEL_09_654080: true
DISA_STIG_RHEL_09_654085: true
DISA_STIG_RHEL_09_654090: true
DISA_STIG_RHEL_09_654095: true
DISA_STIG_RHEL_09_654100: true
DISA_STIG_RHEL_09_654105: true
DISA_STIG_RHEL_09_654110: true
DISA_STIG_RHEL_09_654115: true
DISA_STIG_RHEL_09_654120: true
DISA_STIG_RHEL_09_654125: true
DISA_STIG_RHEL_09_654130: true
DISA_STIG_RHEL_09_654135: true
DISA_STIG_RHEL_09_654140: true
DISA_STIG_RHEL_09_654145: true
DISA_STIG_RHEL_09_654150: true
DISA_STIG_RHEL_09_654155: true
DISA_STIG_RHEL_09_654160: true
DISA_STIG_RHEL_09_654165: true
DISA_STIG_RHEL_09_654170: true
DISA_STIG_RHEL_09_654175: true
DISA_STIG_RHEL_09_654180: true
DISA_STIG_RHEL_09_654185: true
DISA_STIG_RHEL_09_654190: true
DISA_STIG_RHEL_09_654195: true
DISA_STIG_RHEL_09_654200: true
DISA_STIG_RHEL_09_654205: true
DISA_STIG_RHEL_09_654210: true
DISA_STIG_RHEL_09_654215: true
DISA_STIG_RHEL_09_654220: true
DISA_STIG_RHEL_09_654225: true
DISA_STIG_RHEL_09_654230: true
DISA_STIG_RHEL_09_654235: true
DISA_STIG_RHEL_09_654240: true
DISA_STIG_RHEL_09_654245: true
DISA_STIG_RHEL_09_654250: true
DISA_STIG_RHEL_09_654255: true
DISA_STIG_RHEL_09_654260: true
DISA_STIG_RHEL_09_654265: true
DISA_STIG_RHEL_09_654275: true
DISA_STIG_RHEL_09_671010: true
DISA_STIG_RHEL_09_671020: true
DISA_STIG_RHEL_09_671025: true
DISA_STIG_RHEL_09_672010: true
DISA_STIG_RHEL_09_672025: true
DISA_STIG_RHEL_09_672030: true
DISA_STIG_RHEL_09_672035: true
DISA_STIG_RHEL_09_672045: true
account_disable_post_pw_expiration: true
accounts_have_homedir_login_defs: true
accounts_logon_fail_delay: true
accounts_max_concurrent_login_sessions: true
accounts_maximum_age_login_defs: true
accounts_minimum_age_login_defs: true
accounts_no_uid_except_zero: true
accounts_password_minlen_login_defs: true
accounts_password_pam_dcredit: true
accounts_password_pam_dictcheck: true
accounts_password_pam_difok: true
accounts_password_pam_enforce_root: true
accounts_password_pam_lcredit: true
accounts_password_pam_maxclassrepeat: true
accounts_password_pam_maxrepeat: true
accounts_password_pam_minclass: true
accounts_password_pam_minlen: true
accounts_password_pam_ocredit: true
accounts_password_pam_pwhistory_remember_password_auth: true
accounts_password_pam_pwhistory_remember_system_auth: true
accounts_password_pam_pwquality_password_auth: true
accounts_password_pam_pwquality_system_auth: true
accounts_password_pam_retry: true
accounts_password_pam_ucredit: true
accounts_password_pam_unix_rounds_password_auth: true
accounts_password_pam_unix_rounds_system_auth: true
accounts_password_set_max_life_existing: true
accounts_password_set_min_life_existing: true
accounts_passwords_pam_faillock_audit: true
accounts_passwords_pam_faillock_deny: true
accounts_passwords_pam_faillock_deny_root: true
accounts_passwords_pam_faillock_dir: true
accounts_passwords_pam_faillock_interval: true
accounts_passwords_pam_faillock_unlock_time: true
accounts_tmout: true
accounts_umask_etc_bashrc: true
accounts_umask_etc_csh_cshrc: true
accounts_umask_etc_login_defs: true
accounts_umask_etc_profile: true
accounts_umask_interactive_users: true
accounts_user_interactive_home_directory_defined: true
accounts_user_interactive_home_directory_exists: true
aide_check_audit_tools: true
aide_periodic_cron_checking: true
aide_scan_notification: true
aide_verify_acls: true
aide_verify_ext_attributes: true
audit_privileged_commands_init: true
audit_privileged_commands_poweroff: true
audit_privileged_commands_reboot: true
audit_privileged_commands_shutdown: true
audit_rules_dac_modification_chmod: true
audit_rules_dac_modification_chown: true
audit_rules_dac_modification_fchmod: true
audit_rules_dac_modification_fchmodat: true
audit_rules_dac_modification_fchown: true
audit_rules_dac_modification_fchownat: true
audit_rules_dac_modification_fremovexattr: true
audit_rules_dac_modification_fsetxattr: true
audit_rules_dac_modification_lchown: true
audit_rules_dac_modification_lremovexattr: true
audit_rules_dac_modification_lsetxattr: true
audit_rules_dac_modification_removexattr: true
audit_rules_dac_modification_setxattr: true
audit_rules_dac_modification_umount: true
audit_rules_dac_modification_umount2: true
audit_rules_execution_chacl: true
audit_rules_execution_chcon: true
audit_rules_execution_semanage: true
audit_rules_execution_setfacl: true
audit_rules_execution_setfiles: true
audit_rules_execution_setsebool: true
audit_rules_file_deletion_events_rename: true
audit_rules_file_deletion_events_renameat: true
audit_rules_file_deletion_events_rmdir: true
audit_rules_file_deletion_events_unlink: true
audit_rules_file_deletion_events_unlinkat: true
audit_rules_immutable: true
audit_rules_kernel_module_loading_delete: true
audit_rules_kernel_module_loading_finit: true
audit_rules_kernel_module_loading_init: true
audit_rules_login_events_faillock: true
audit_rules_login_events_lastlog: true
audit_rules_login_events_tallylog: true
audit_rules_privileged_commands_chage: true
audit_rules_privileged_commands_chsh: true
audit_rules_privileged_commands_crontab: true
audit_rules_privileged_commands_gpasswd: true
audit_rules_privileged_commands_kmod: true
audit_rules_privileged_commands_mount: true
audit_rules_privileged_commands_newgrp: true
audit_rules_privileged_commands_pam_timestamp_check: true
audit_rules_privileged_commands_passwd: true
audit_rules_privileged_commands_postdrop: true
audit_rules_privileged_commands_postqueue: true
audit_rules_privileged_commands_ssh_agent: true
audit_rules_privileged_commands_ssh_keysign: true
audit_rules_privileged_commands_su: true
audit_rules_privileged_commands_sudo: true
audit_rules_privileged_commands_sudoedit: true
audit_rules_privileged_commands_umount: true
audit_rules_privileged_commands_unix_chkpwd: true
audit_rules_privileged_commands_unix_update: true
audit_rules_privileged_commands_userhelper: true
audit_rules_privileged_commands_usermod: true
audit_rules_sudoers: true
audit_rules_sudoers_d: true
audit_rules_suid_privilege_function: true
audit_rules_system_shutdown: true
audit_rules_unsuccessful_file_modification_creat: true
audit_rules_unsuccessful_file_modification_ftruncate: true
audit_rules_unsuccessful_file_modification_open: true
audit_rules_unsuccessful_file_modification_open_by_handle_at: true
audit_rules_unsuccessful_file_modification_openat: true
audit_rules_unsuccessful_file_modification_truncate: true
audit_rules_usergroup_modification_group: true
audit_rules_usergroup_modification_gshadow: true
audit_rules_usergroup_modification_opasswd: true
audit_rules_usergroup_modification_passwd: true
audit_rules_usergroup_modification_shadow: true
auditd_audispd_syslog_plugin_activated: true
auditd_data_disk_error_action_stig: true
auditd_data_disk_full_action_stig: true
auditd_data_retention_action_mail_acct: true
auditd_data_retention_admin_space_left_action: true
auditd_data_retention_admin_space_left_percentage: true
auditd_data_retention_max_log_file_action_stig: true
auditd_data_retention_space_left_action: true
auditd_data_retention_space_left_percentage: true
auditd_freq: true
auditd_local_events: true
auditd_log_format: true
auditd_name_format: true
auditd_overflow_action: true
auditd_write_logs: true
banner_etc_issue: true
chronyd_client_only: true
chronyd_no_chronyc_network: true
chronyd_or_ntpd_set_maxpoll: true
clean_components_post_updating: true
configure_bashrc_exec_tmux: true
configure_crypto_policy: true
configure_kerberos_crypto_policy: true
configure_libreswan_crypto_policy: true
configure_opensc_card_drivers: true
configure_openssl_crypto_policy: true
configure_ssh_crypto_policy: true
configure_strategy: true
configure_tmux_lock_after_time: true
configure_tmux_lock_command: true
coredump_disable_backtraces: true
coredump_disable_storage: true
dconf_db_up_to_date: true
dconf_gnome_banner_enabled: true
dconf_gnome_disable_automount_open: true
dconf_gnome_disable_autorun: true
dconf_gnome_disable_ctrlaltdel_reboot: true
dconf_gnome_disable_restart_shutdown: true
dconf_gnome_disable_user_list: true
dconf_gnome_lock_screen_on_smartcard_removal: true
dconf_gnome_screensaver_idle_delay: true
dconf_gnome_screensaver_lock_delay: true
dconf_gnome_screensaver_lock_enabled: true
dconf_gnome_screensaver_mode_blank: true
dconf_gnome_screensaver_user_locks: true
dconf_gnome_session_idle_user_locks: true
dir_group_ownership_library_dirs: true
dir_ownership_library_dirs: true
dir_permissions_library_dirs: true
dir_perms_world_writable_root_owned: true
dir_perms_world_writable_sticky_bits: true
directory_group_ownership_var_log_audit: true
directory_ownership_var_log_audit: true
disable_ctrlaltdel_burstaction: true
disable_ctrlaltdel_reboot: true
disable_host_auth: true
disable_strategy: true
disable_users_coredumps: true
disallow_bypass_password_sudo: true
display_login_attempts: true
enable_authselect: true
enable_dracut_fips_module: true
enable_fips_mode: true
enable_strategy: true
ensure_gpgcheck_globally_activated: true
ensure_gpgcheck_local_packages: true
ensure_gpgcheck_never_disabled: true
ensure_redhat_gpgkey_installed: true
file_audit_tools_group_ownership: true
file_audit_tools_ownership: true
file_audit_tools_permissions: true
file_groupowner_backup_etc_group: true
file_groupowner_backup_etc_gshadow: true
file_groupowner_backup_etc_passwd: true
file_groupowner_backup_etc_shadow: true
file_groupowner_cron_d: true
file_groupowner_cron_daily: true
file_groupowner_cron_deny: true
file_groupowner_cron_hourly: true
file_groupowner_cron_monthly: true
file_groupowner_cron_weekly: true
file_groupowner_crontab: true
file_groupowner_etc_group: true
file_groupowner_etc_gshadow: true
file_groupowner_etc_passwd: true
file_groupowner_etc_shadow: true
file_groupowner_grub2_cfg: true
file_groupowner_sshd_config: true
file_groupowner_var_log: true
file_groupowner_var_log_messages: true
file_groupownership_home_directories: true
file_groupownership_system_commands_dirs: true
file_owner_backup_etc_group: true
file_owner_backup_etc_gshadow: true
file_owner_backup_etc_passwd: true
file_owner_backup_etc_shadow: true
file_owner_cron_d: true
file_owner_cron_daily: true
file_owner_cron_deny: true
file_owner_cron_hourly: true
file_owner_cron_monthly: true
file_owner_cron_weekly: true
file_owner_crontab: true
file_owner_etc_group: true
file_owner_etc_gshadow: true
file_owner_etc_passwd: true
file_owner_etc_shadow: true
file_owner_grub2_cfg: true
file_owner_sshd_config: true
file_owner_var_log: true
file_owner_var_log_messages: true
file_ownership_binary_dirs: true
file_ownership_library_dirs: true
file_permission_user_init_files: true
file_permissions_backup_etc_group: true
file_permissions_backup_etc_gshadow: true
file_permissions_backup_etc_passwd: true
file_permissions_backup_etc_shadow: true
file_permissions_binary_dirs: true
file_permissions_cron_d: true
file_permissions_cron_daily: true
file_permissions_cron_hourly: true
file_permissions_cron_monthly: true
file_permissions_cron_weekly: true
file_permissions_crontab: true
file_permissions_etc_audit_auditd: true
file_permissions_etc_audit_rulesd: true
file_permissions_etc_group: true
file_permissions_etc_gshadow: true
file_permissions_etc_passwd: true
file_permissions_etc_shadow: true
file_permissions_home_directories: true
file_permissions_library_dirs: true
file_permissions_sshd_config: true
file_permissions_sshd_private_key: true
file_permissions_sshd_pub_key: true
file_permissions_var_log: true
file_permissions_var_log_audit: true
file_permissions_var_log_messages: true
firewalld_sshd_port_enabled: true
gnome_gdm_disable_automatic_login: true
grub2_audit_argument: true
grub2_audit_backlog_limit_argument: true
grub2_disable_interactive_boot: true
grub2_page_poison_argument: true
grub2_pti_argument: true
grub2_slub_debug_argument: true
grub2_vsyscall_argument: true
high_disruption: true
high_severity: true
install_smartcard_packages: true
kerberos_disable_no_keytab: true
kernel_module_atm_disabled: true
kernel_module_bluetooth_disabled: true
kernel_module_can_disabled: true
kernel_module_cramfs_disabled: true
kernel_module_sctp_disabled: true
kernel_module_tipc_disabled: true
logind_session_timeout: true
low_complexity: true
low_disruption: true
low_severity: true
medium_complexity: true
medium_disruption: true
medium_severity: true
mount_option_boot_efi_nosuid: true
mount_option_boot_nodev: true
mount_option_boot_nosuid: true
mount_option_dev_shm_nodev: true
mount_option_dev_shm_noexec: true
mount_option_dev_shm_nosuid: true
mount_option_home_nodev: true
mount_option_home_noexec: true
mount_option_home_nosuid: true
mount_option_krb_sec_remote_filesystems: true
mount_option_nodev_nonroot_local_partitions: true
mount_option_nodev_remote_filesystems: true
mount_option_nodev_removable_partitions: true
mount_option_noexec_remote_filesystems: true
mount_option_noexec_removable_partitions: true
mount_option_nosuid_remote_filesystems: true
mount_option_nosuid_removable_partitions: true
mount_option_tmp_nodev: true
mount_option_tmp_noexec: true
mount_option_tmp_nosuid: true
mount_option_var_log_audit_nodev: true
mount_option_var_log_audit_noexec: true
mount_option_var_log_audit_nosuid: true
mount_option_var_log_nodev: true
mount_option_var_log_noexec: true
mount_option_var_log_nosuid: true
mount_option_var_nodev: true
mount_option_var_tmp_nodev: true
mount_option_var_tmp_noexec: true
mount_option_var_tmp_nosuid: true
network_sniffer_disabled: true
networkmanager_dns_mode: true
no_empty_passwords: true
no_empty_passwords_etc_shadow: true
no_host_based_files: true
no_reboot_needed: true
no_shelllogin_for_systemaccounts: true
no_user_host_based_files: true
package_aide_installed: true
package_audispd_plugins_installed: true
package_audit_installed: true
package_chrony_installed: true
package_crypto_policies_installed: true
package_fapolicyd_installed: true
package_firewalld_installed: true
package_gnutls_utils_installed: true
package_gssproxy_removed: true
package_iprutils_removed: true
package_libreswan_installed: true
package_nfs_utils_removed: true
package_nss_tools_installed: true
package_opensc_installed: true
package_openssh_clients_installed: true
package_openssh_server_installed: true
package_pcsc_lite_installed: true
package_policycoreutils_installed: true
package_policycoreutils_python_utils_installed: true
package_quagga_removed: true
package_rng_tools_installed: true
package_rsh_server_removed: true
package_rsyslog_gnutls_installed: true
package_rsyslog_installed: true
package_s_nail_installed: true
package_sendmail_removed: true
package_subscription_manager_installed: true
package_sudo_installed: true
package_telnet_server_removed: true
package_tftp_server_removed: true
package_tmux_installed: true
package_tuned_removed: true
package_usbguard_installed: true
package_vsftpd_removed: true
package_ypserv_removed: true
patch_strategy: true
postfix_client_configure_mail_alias: true
postfix_client_configure_mail_alias_postmaster: true
postfix_prevent_unrestricted_relay: true
reboot_required: true
require_emergency_target_auth: true
require_singleuser_auth: true
restrict_strategy: true
root_permissions_syslibrary_files: true
rsyslog_encrypt_offload_actionsendstreamdriverauthmode: true
rsyslog_encrypt_offload_actionsendstreamdrivermode: true
rsyslog_encrypt_offload_defaultnetstreamdriver: true
rsyslog_nolisten: true
rsyslog_remote_access_monitoring: true
rsyslog_remote_loghost: true
security_patches_up_to_date: true
selinux_policytype: true
selinux_state: true
service_auditd_enabled: true
service_autofs_disabled: true
service_chronyd_enabled: true
service_debug_shell_disabled: true
service_fapolicyd_enabled: true
service_firewalld_enabled: true
service_kdump_disabled: true
service_pcscd_enabled: true
service_rsyslog_enabled: true
service_sshd_enabled: true
service_systemd_coredump_disabled: true
service_systemd_journald_enabled: true
service_usbguard_enabled: true
set_password_hashing_algorithm_libuserconf: true
set_password_hashing_algorithm_logindefs: true
set_password_hashing_algorithm_passwordauth: true
set_password_hashing_min_rounds_logindefs: true
skip_ansible_lint: true
sshd_disable_compression: true
sshd_disable_empty_passwords: true
sshd_disable_gssapi_auth: true
sshd_disable_kerb_auth: true
sshd_disable_rhosts: true
sshd_disable_root_login: true
sshd_disable_user_known_hosts: true
sshd_disable_x11_forwarding: true
sshd_do_not_permit_user_env: true
sshd_enable_pam: true
sshd_enable_pubkey_auth: true
sshd_enable_strictmodes: true
sshd_enable_warning_banner: true
sshd_print_last_log: true
sshd_rekey_limit: true
sshd_set_idle_timeout: true
sshd_set_keepalive: true
sshd_set_loglevel_verbose: true
sshd_use_priv_separation: true
sshd_x11_use_localhost: true
sssd_certificate_verification: true
sssd_enable_smartcards: true
sssd_offline_cred_expiration: true
sudo_remove_no_authenticate: true
sudo_remove_nopasswd: true
sudo_require_reauthentication: true
sudoers_validate_passwd: true
sysctl_fs_protected_hardlinks: true
sysctl_fs_protected_symlinks: true
sysctl_kernel_core_pattern: true
sysctl_kernel_dmesg_restrict: true
sysctl_kernel_exec_shield: true
sysctl_kernel_kexec_load_disabled: true
sysctl_kernel_kptr_restrict: true
sysctl_kernel_perf_event_paranoid: true
sysctl_kernel_randomize_va_space: true
sysctl_kernel_unprivileged_bpf_disabled: true
sysctl_kernel_yama_ptrace_scope: true
sysctl_net_core_bpf_jit_harden: true
sysctl_net_ipv4_conf_all_accept_redirects: true
sysctl_net_ipv4_conf_all_accept_source_route: true
sysctl_net_ipv4_conf_all_forwarding: true
sysctl_net_ipv4_conf_all_log_martians: true
sysctl_net_ipv4_conf_all_rp_filter: true
sysctl_net_ipv4_conf_all_send_redirects: true
sysctl_net_ipv4_conf_default_accept_redirects: true
sysctl_net_ipv4_conf_default_accept_source_route: true
sysctl_net_ipv4_conf_default_log_martians: true
sysctl_net_ipv4_conf_default_rp_filter: true
sysctl_net_ipv4_conf_default_send_redirects: true
sysctl_net_ipv4_icmp_echo_ignore_broadcasts: true
sysctl_net_ipv4_icmp_ignore_bogus_error_responses: true
sysctl_net_ipv4_tcp_syncookies: true
sysctl_net_ipv6_conf_all_accept_ra: true
sysctl_net_ipv6_conf_all_accept_redirects: true
sysctl_net_ipv6_conf_all_accept_source_route: true
sysctl_net_ipv6_conf_all_forwarding: true
sysctl_net_ipv6_conf_default_accept_ra: true
sysctl_net_ipv6_conf_default_accept_redirects: true
sysctl_net_ipv6_conf_default_accept_source_route: true
sysctl_user_max_user_namespaces: true
tftpd_uses_secure_mode: true
unknown_severity: true
unknown_strategy: true
usbguard_generate_policy: true
use_pam_wheel_for_su: true
wireless_disable_interfaces: true
xwindows_runlevel_target: true