{
  "generatedAt": "2026-09-04T17:45:33.652Z",
  "independentVerification": true,
  "baseline": {
    "runId": 4816,
    "targetId": 4816,
    "score": 88.888885,
    "passed": 17,
    "failed": 4
  },
  "remediation": {
    "runId": 4819,
    "targetId": 4819,
    "score": 97.222229,
    "passed": 17,
    "failed": 0,
    "fixed": 3
  },
  "convergence": {
    "attempted": true,
    "runId": 4823,
    "targetId": 4823,
    "score": 100,
    "passed": 1,
    "failed": 0,
    "fixed": 0,
    "initialVerificationRunId": 4821,
    "targetedRuleIds": [
      "xccdf_org.ssgproject.content_rule_mount_option_tmp_noexec"
    ]
  },
  "verification": {
    "runId": 4825,
    "targetId": 4825,
    "score": 100,
    "passed": 21,
    "failed": 0
  },
  "delta": {
    "score": 11.111114999999998,
    "passedDelta": 4,
    "failedDelta": -4,
    "failuresRemaining": 0,
    "failToPass": 4,
    "passToFail": 0,
    "changedRules": 4
  },
  "transitions": {
    "failToPass": 4,
    "passToFail": 0,
    "unchangedPass": 17,
    "unchangedFail": 0,
    "changedRules": 4
  },
  "rules": [
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_aide_build_database",
      "title": "Build and Test AIDE Database",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_aide_check_audit_tools",
      "title": "Configure AIDE to Verify the Audit Tools",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_banner_etc_issue",
      "title": "Modify the System Login Banner",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_banner_etc_issue_net",
      "title": "Modify the System Login Banner for Remote Connections",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_banner_etc_motd",
      "title": "Modify the System Message of the Day Banner",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_coredump_disable_backtraces",
      "title": "Disable core dump backtraces",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_coredump_disable_storage",
      "title": "Disable storing core dump",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_dir_perms_world_writable_sticky_bits",
      "title": "Verify that All World-Writable Directories Have Sticky Bits Set",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_ensure_gpgcheck_globally_activated",
      "title": "Ensure gpgcheck Enabled In Main dnf Configuration",
      "severity": "high",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue",
      "title": "Verify Group Ownership of System Login Banner",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue_net",
      "title": "Verify Group Ownership of System Login Banner for Remote Connections",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd",
      "title": "Verify Group Ownership of Message of the Day Banner",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_grub2_cfg",
      "title": "Verify /boot/grub2/grub.cfg Group Ownership",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_user_cfg",
      "title": "Verify /boot/grub2/user.cfg Group Ownership",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_etc_issue",
      "title": "Verify ownership of System Login Banner",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_etc_issue_net",
      "title": "Verify ownership of System Login Banner for Remote Connections",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_etc_motd",
      "title": "Verify ownership of Message of the Day Banner",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_grub2_cfg",
      "title": "Verify /boot/grub2/grub.cfg User Ownership",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_user_cfg",
      "title": "Verify /boot/grub2/user.cfg User Ownership",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue",
      "title": "Verify permissions on System Login Banner",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue_net",
      "title": "Verify permissions on System Login Banner for Remote Connections",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_etc_motd",
      "title": "Verify permissions on Message of the Day Banner",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_grub2_cfg",
      "title": "Verify /boot/grub2/grub.cfg Permissions",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_unauthorized_world_writable",
      "title": "Ensure No World-Writable Files Exist",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_ungroupowned",
      "title": "Ensure All Files Are Owned by a Group",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_user_cfg",
      "title": "Verify /boot/grub2/user.cfg Permissions",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_grub2_enable_selinux",
      "title": "Ensure SELinux Not Disabled in /etc/default/grub",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_journald_compress",
      "title": "Ensure journald is configured to compress large log files",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_journald_forward_to_syslog",
      "title": "Ensure journald is configured to send logs to rsyslog",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_journald_storage",
      "title": "Ensure journald is configured to write log files to persistent disk",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_cramfs_disabled",
      "title": "Disable Mounting of cramfs",
      "severity": "low",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_freevxfs_disabled",
      "title": "Disable Mounting of freevxfs",
      "severity": "low",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_hfs_disabled",
      "title": "Disable Mounting of hfs",
      "severity": "low",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_hfsplus_disabled",
      "title": "Disable Mounting of hfsplus",
      "severity": "low",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_jffs2_disabled",
      "title": "Disable Mounting of jffs2",
      "severity": "low",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled",
      "title": "Disable Modprobe Loading of USB Storage Driver",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nodev",
      "title": "Add nodev Option to /dev/shm",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_noexec",
      "title": "Add noexec Option to /dev/shm",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nosuid",
      "title": "Add nosuid Option to /dev/shm",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_home_nodev",
      "title": "Add nodev Option to /home",
      "severity": "unknown",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_home_nosuid",
      "title": "Add nosuid Option to /home",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_tmp_nodev",
      "title": "Add nodev Option to /tmp",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_tmp_noexec",
      "title": "Add noexec Option to /tmp",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_tmp_nosuid",
      "title": "Add nosuid Option to /tmp",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nodev",
      "title": "Add nodev Option to /var/log/audit",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_noexec",
      "title": "Add noexec Option to /var/log/audit",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nosuid",
      "title": "Add nosuid Option to /var/log/audit",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_nodev",
      "title": "Add nodev Option to /var/log",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_noexec",
      "title": "Add noexec Option to /var/log",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_nosuid",
      "title": "Add nosuid Option to /var/log",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_nodev",
      "title": "Add nodev Option to /var",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_nosuid",
      "title": "Add nosuid Option to /var",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nodev",
      "title": "Add nodev Option to /var/tmp",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_noexec",
      "title": "Add noexec Option to /var/tmp",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nosuid",
      "title": "Add nosuid Option to /var/tmp",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_no_files_unowned_by_user",
      "title": "Ensure All Files Are Owned by a User",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_aide_installed",
      "title": "Install AIDE",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_libselinux_installed",
      "title": "Install libselinux Package",
      "severity": "high",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_mcstrans_removed",
      "title": "Uninstall mcstrans Package",
      "severity": "low",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_rsyslog_installed",
      "title": "Ensure rsyslog is Installed",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_setroubleshoot_removed",
      "title": "Uninstall setroubleshoot Package",
      "severity": "low",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_partition_for_dev_shm",
      "title": "Ensure /dev/shm is configured",
      "severity": "low",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_partition_for_tmp",
      "title": "Ensure /tmp Located On Separate Partition",
      "severity": "low",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_filecreatemode",
      "title": "Ensure rsyslog Default File Permissions Configured",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_files_groupownership",
      "title": "Ensure Log Files Are Owned By Appropriate Group",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_files_ownership",
      "title": "Ensure Log Files Are Owned By Appropriate User",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_files_permissions",
      "title": "Ensure System Log Files Have Correct Permissions",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_selinux_confinement_of_daemons",
      "title": "Ensure No Daemons are Unconfined by SELinux",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_selinux_not_disabled",
      "title": "Ensure SELinux is Not Disabled",
      "severity": "high",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_selinux_policytype",
      "title": "Configure SELinux Policy",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled",
      "title": "Enable systemd-journald Service",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space",
      "title": "Enable Randomized Layout of Virtual Address Space",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope",
      "title": "Restrict usage of ptrace to descendant processes",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    }
  ],
  "verificationGate": {
    "passed": true,
    "coverageComplete": true,
    "selectedControlCount": 73,
    "expectedResultCount": 73,
    "expectedResultRuleIds": [
      "xccdf_org.ssgproject.content_rule_aide_build_database",
      "xccdf_org.ssgproject.content_rule_aide_check_audit_tools",
      "xccdf_org.ssgproject.content_rule_banner_etc_issue",
      "xccdf_org.ssgproject.content_rule_banner_etc_issue_net",
      "xccdf_org.ssgproject.content_rule_banner_etc_motd",
      "xccdf_org.ssgproject.content_rule_coredump_disable_backtraces",
      "xccdf_org.ssgproject.content_rule_coredump_disable_storage",
      "xccdf_org.ssgproject.content_rule_dir_perms_world_writable_sticky_bits",
      "xccdf_org.ssgproject.content_rule_ensure_gpgcheck_globally_activated",
      "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue",
      "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue_net",
      "xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd",
      "xccdf_org.ssgproject.content_rule_file_groupowner_grub2_cfg",
      "xccdf_org.ssgproject.content_rule_file_groupowner_user_cfg",
      "xccdf_org.ssgproject.content_rule_file_owner_etc_issue",
      "xccdf_org.ssgproject.content_rule_file_owner_etc_issue_net",
      "xccdf_org.ssgproject.content_rule_file_owner_etc_motd",
      "xccdf_org.ssgproject.content_rule_file_owner_grub2_cfg",
      "xccdf_org.ssgproject.content_rule_file_owner_user_cfg",
      "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue",
      "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue_net",
      "xccdf_org.ssgproject.content_rule_file_permissions_etc_motd",
      "xccdf_org.ssgproject.content_rule_file_permissions_grub2_cfg",
      "xccdf_org.ssgproject.content_rule_file_permissions_unauthorized_world_writable",
      "xccdf_org.ssgproject.content_rule_file_permissions_ungroupowned",
      "xccdf_org.ssgproject.content_rule_file_permissions_user_cfg",
      "xccdf_org.ssgproject.content_rule_grub2_enable_selinux",
      "xccdf_org.ssgproject.content_rule_journald_compress",
      "xccdf_org.ssgproject.content_rule_journald_forward_to_syslog",
      "xccdf_org.ssgproject.content_rule_journald_storage",
      "xccdf_org.ssgproject.content_rule_kernel_module_cramfs_disabled",
      "xccdf_org.ssgproject.content_rule_kernel_module_freevxfs_disabled",
      "xccdf_org.ssgproject.content_rule_kernel_module_hfs_disabled",
      "xccdf_org.ssgproject.content_rule_kernel_module_hfsplus_disabled",
      "xccdf_org.ssgproject.content_rule_kernel_module_jffs2_disabled",
      "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled",
      "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_noexec",
      "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_home_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_home_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_tmp_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_tmp_noexec",
      "xccdf_org.ssgproject.content_rule_mount_option_tmp_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_noexec",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_noexec",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_var_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_var_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_noexec",
      "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nosuid",
      "xccdf_org.ssgproject.content_rule_no_files_unowned_by_user",
      "xccdf_org.ssgproject.content_rule_package_aide_installed",
      "xccdf_org.ssgproject.content_rule_package_libselinux_installed",
      "xccdf_org.ssgproject.content_rule_package_mcstrans_removed",
      "xccdf_org.ssgproject.content_rule_package_rsyslog_installed",
      "xccdf_org.ssgproject.content_rule_package_setroubleshoot_removed",
      "xccdf_org.ssgproject.content_rule_partition_for_dev_shm",
      "xccdf_org.ssgproject.content_rule_partition_for_tmp",
      "xccdf_org.ssgproject.content_rule_rsyslog_filecreatemode",
      "xccdf_org.ssgproject.content_rule_rsyslog_files_groupownership",
      "xccdf_org.ssgproject.content_rule_rsyslog_files_ownership",
      "xccdf_org.ssgproject.content_rule_rsyslog_files_permissions",
      "xccdf_org.ssgproject.content_rule_selinux_confinement_of_daemons",
      "xccdf_org.ssgproject.content_rule_selinux_not_disabled",
      "xccdf_org.ssgproject.content_rule_selinux_policytype",
      "xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled",
      "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space",
      "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope"
    ],
    "suppressedConflictRuleIds": [],
    "baselineResultCount": 73,
    "verificationResultCount": 73,
    "baselineMissingRuleIds": [],
    "baselineUnexpectedRuleIds": [],
    "verificationMissingRuleIds": [],
    "verificationUnexpectedRuleIds": [],
    "scoreNotLower": true,
    "failedNotHigher": true,
    "noPassToFailRegressions": true,
    "improvementRequired": true,
    "improvementProven": true,
    "fipsPostReboot": {
      "required": false,
      "setupProofPassed": true,
      "nonPassRuleIds": []
    },
    "pciZeroFindings": {
      "required": false,
      "passed": true,
      "reasons": []
    },
    "runtimeProofAcceptedRuleIds": [],
    "effectiveVerificationFailed": 0,
    "reasons": []
  },
  "fipsSetupProof": null,
  "oracle9PciConvergenceProof": null,
  "oracle9Sdl1ConvergenceProof": null,
  "oracle10Sdl1ConvergenceProof": null,
  "rhel8PciConvergenceProof": null,
  "rhel10Sdl1ConvergenceProof": null,
  "al2023Sdl1ConvergenceProof": {
    "version": 1,
    "policyVersion": "al2023-Hardened-convergence-v1",
    "workflowId": 1491,
    "productId": "al2023",
    "profileId": "xccdf_org.complianceautomator.content_profile_standard_defense_level_1_hardening",
    "architecture": "arm64",
    "targetedRuleIds": [
      "xccdf_org.ssgproject.content_rule_mount_option_tmp_noexec"
    ],
    "selectedRuleIdsSha256": "21c69d417eaff3f566e0cfe962500914245b8a42ff3299bdb32043f600ccea54",
    "repairRuleIds": [
      "xccdf_org.ssgproject.content_rule_mount_option_tmp_noexec"
    ],
    "commandSha256": "0eeb77e2351d72f1a430f4ed3ddf02730c7ab226b720e54dcda8bd767656c7c6",
    "outputSha256": "cce3d417dee41a7136760102b60942f819aa3e8ade69bca49c4e18c606a32443",
    "outputExcerpt": "__CA_AL2023_SDL1_CONVERGENCE_VERSION__:al2023-Hardened-convergence-v1\n__CA_AL2023_SDL1_ARCHITECTURE__:arm64\n__CA_AL2023_SDL1_TMP_MOUNT__:tmpfs\n__CA_AL2023_SDL1_TMP_OPTIONS__:nodev,nosuid,noexec\n__CA_AL2023_SDL1_TMP_MODE__:1777\n__CA_AL2023_SDL1_CONVERGENCE__:complete",
    "exitCode": 0,
    "appliedAt": "2026-09-04T17:44:50.415Z",
    "passed": true
  },
  "rockySdl1ConvergenceProof": null,
  "ubuntu2204PciConvergenceProof": null,
  "ubuntu2404PciConvergenceProof": null,
  "ubuntu2404PciFinalStabilizationProof": null,
  "ubuntu2004PciConvergenceProof": null,
  "ubuntu2004PciFinalStabilizationProof": null,
  "ubuntu2004Sdl1ConvergenceProof": null,
  "ubuntu2404Sdl1ConvergenceProof": null,
  "ubuntu2604Sdl1ConvergenceProof": null,
  "ubuntu2604PciConvergenceProof": null,
  "ubuntu2604PciFinalStabilizationProof": null,
  "rebootDeferredVerification": null
}
