{
  "generatedAt": "2026-09-04T21:57:31.360Z",
  "independentVerification": true,
  "baseline": {
    "runId": 5056,
    "targetId": 5056,
    "score": 65.798607,
    "passed": 31,
    "failed": 26
  },
  "remediation": {
    "runId": 5066,
    "targetId": 5066,
    "score": 94.444435,
    "passed": 31,
    "failed": 1,
    "fixed": 25
  },
  "convergence": {
    "attempted": true,
    "runId": 5080,
    "targetId": 5080,
    "score": 100,
    "passed": 1,
    "failed": 0,
    "fixed": 0,
    "initialVerificationRunId": 5072,
    "targetedRuleIds": [
      "xccdf_org.ssgproject.content_rule_ensure_journald_and_rsyslog_not_active_together"
    ]
  },
  "verification": {
    "runId": 5083,
    "targetId": 5083,
    "score": 100,
    "passed": 57,
    "failed": 0
  },
  "delta": {
    "score": 34.201392999999996,
    "passedDelta": 26,
    "failedDelta": -26,
    "failuresRemaining": 0,
    "failToPass": 26,
    "passToFail": 0,
    "changedRules": 26
  },
  "transitions": {
    "failToPass": 26,
    "passToFail": 0,
    "unchangedPass": 31,
    "unchangedFail": 0,
    "changedRules": 26
  },
  "rules": [
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_aide_build_database",
      "title": "Build and Test AIDE Database",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_aide_check_audit_tools",
      "title": "Configure AIDE to Verify the Audit Tools",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_banner_etc_issue_cis",
      "title": "Ensure Local Login Warning Banner Is Configured Properly",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_banner_etc_issue_net_cis",
      "title": "Ensure Remote Login Warning Banner Is Configured Properly",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_banner_etc_motd_cis",
      "title": "Ensure Message Of The Day Is Configured Properly",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_coredump_disable_backtraces",
      "title": "Disable core dump backtraces",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_coredump_disable_storage",
      "title": "Disable storing core dump",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_dconf_gnome_banner_enabled",
      "title": "Enable GNOME3 Login Warning Banner",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_dconf_gnome_login_banner_text",
      "title": "Set the GNOME3 Login Warning Banner Text",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_dir_perms_world_writable_sticky_bits",
      "title": "Verify that All World-Writable Directories Have Sticky Bits Set",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_disable_users_coredumps",
      "title": "Disable Core Dumps for All Users",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_ensure_gpgcheck_globally_activated",
      "title": "Ensure gpgcheck Enabled In Main dnf Configuration",
      "severity": "high",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_ensure_journald_and_rsyslog_not_active_together",
      "title": "Ensure journald and rsyslog Are Not Active Together",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_boot_grub2",
      "title": "All GRUB configuration files must be group-owned by root",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue",
      "title": "Verify Group Ownership of System Login Banner",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue_net",
      "title": "Verify Group Ownership of System Login Banner for Remote Connections",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd",
      "title": "Verify Group Ownership of Message of the Day Banner",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_boot_grub2",
      "title": "All GRUB configuration files must be owned by root",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_etc_issue",
      "title": "Verify ownership of System Login Banner",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_etc_issue_net",
      "title": "Verify ownership of System Login Banner for Remote Connections",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_etc_motd",
      "title": "Verify ownership of Message of the Day Banner",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_boot_grub2",
      "title": "All GRUB configuration files must have mode 0600 or more restrictive",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue",
      "title": "Verify permissions on System Login Banner",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue_net",
      "title": "Verify permissions on System Login Banner for Remote Connections",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_etc_motd",
      "title": "Verify permissions on Message of the Day Banner",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_unauthorized_world_writable",
      "title": "Ensure No World-Writable Files Exist",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_grub2_enable_selinux",
      "title": "Ensure SELinux Not Disabled in /etc/default/grub",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_journald_compress",
      "title": "Ensure journald is configured to compress large log files",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_journald_disable_forward_to_syslog",
      "title": "Ensure journald ForwardToSyslog is disabled",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_journald_storage",
      "title": "Ensure journald is configured to write log files to persistent disk",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_cramfs_disabled",
      "title": "Disable Mounting of cramfs",
      "severity": "low",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_freevxfs_disabled",
      "title": "Disable Mounting of freevxfs",
      "severity": "low",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_hfs_disabled",
      "title": "Disable Mounting of hfs",
      "severity": "low",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_hfsplus_disabled",
      "title": "Disable Mounting of hfsplus",
      "severity": "low",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_jffs2_disabled",
      "title": "Disable Mounting of jffs2",
      "severity": "low",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled",
      "title": "Disable Modprobe Loading of USB Storage Driver",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nodev",
      "title": "Add nodev Option to /dev/shm",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_noexec",
      "title": "Add noexec Option to /dev/shm",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nosuid",
      "title": "Add nosuid Option to /dev/shm",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_home_nodev",
      "title": "Add nodev Option to /home",
      "severity": "unknown",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_home_nosuid",
      "title": "Add nosuid Option to /home",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nodev",
      "title": "Add nodev Option to /var/log/audit",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_noexec",
      "title": "Add noexec Option to /var/log/audit",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nosuid",
      "title": "Add nosuid Option to /var/log/audit",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_nodev",
      "title": "Add nodev Option to /var/log",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_noexec",
      "title": "Add noexec Option to /var/log",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_nosuid",
      "title": "Add nosuid Option to /var/log",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_nodev",
      "title": "Add nodev Option to /var",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_nosuid",
      "title": "Add nosuid Option to /var",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nodev",
      "title": "Add nodev Option to /var/tmp",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_noexec",
      "title": "Add noexec Option to /var/tmp",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nosuid",
      "title": "Add nosuid Option to /var/tmp",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_no_files_or_dirs_ungroupowned",
      "title": "Ensure All Files And Directories Are Owned by a Group",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_no_files_or_dirs_unowned_by_user",
      "title": "Ensure All Files And Directories Are Owned by a User",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_aide_installed",
      "title": "Install AIDE",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_libselinux_installed",
      "title": "Install libselinux Package",
      "severity": "high",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_mcstrans_removed",
      "title": "Uninstall mcstrans Package",
      "severity": "low",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_sequoia-sq_installed",
      "title": "Install sequoia-sq Package",
      "severity": "low",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_setroubleshoot_removed",
      "title": "Uninstall setroubleshoot Package",
      "severity": "low",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_partition_for_dev_shm",
      "title": "Ensure /dev/shm is configured",
      "severity": "low",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_files_groupownership",
      "title": "Ensure Log Files Are Owned By Appropriate Group",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_files_ownership",
      "title": "Ensure Log Files Are Owned By Appropriate User",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_files_permissions",
      "title": "Ensure System Log Files Have Correct Permissions",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_selinux_not_disabled",
      "title": "Ensure SELinux is Not Disabled",
      "severity": "high",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_selinux_policytype",
      "title": "Configure SELinux Policy",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_service_autofs_disabled",
      "title": "Disable the Automounter",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled",
      "title": "Enable systemd-journald Service",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_fs_protected_hardlinks",
      "title": "Enable Kernel Parameter to Enforce DAC on Hardlinks",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_fs_suid_dumpable",
      "title": "Disable Core Dumps for SUID programs",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_dmesg_restrict",
      "title": "Restrict Access to Kernel Message Buffer",
      "severity": "low",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_kptr_restrict",
      "title": "Restrict Exposed Kernel Pointer Addresses Access",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space",
      "title": "Enable Randomized Layout of Virtual Address Space",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope",
      "title": "Restrict usage of ptrace to descendant processes",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    }
  ],
  "verificationGate": {
    "passed": true,
    "coverageComplete": true,
    "selectedControlCount": 73,
    "expectedResultCount": 73,
    "expectedResultRuleIds": [
      "xccdf_org.ssgproject.content_rule_aide_build_database",
      "xccdf_org.ssgproject.content_rule_aide_check_audit_tools",
      "xccdf_org.ssgproject.content_rule_banner_etc_issue_cis",
      "xccdf_org.ssgproject.content_rule_banner_etc_issue_net_cis",
      "xccdf_org.ssgproject.content_rule_banner_etc_motd_cis",
      "xccdf_org.ssgproject.content_rule_coredump_disable_backtraces",
      "xccdf_org.ssgproject.content_rule_coredump_disable_storage",
      "xccdf_org.ssgproject.content_rule_dconf_gnome_banner_enabled",
      "xccdf_org.ssgproject.content_rule_dconf_gnome_login_banner_text",
      "xccdf_org.ssgproject.content_rule_dir_perms_world_writable_sticky_bits",
      "xccdf_org.ssgproject.content_rule_disable_users_coredumps",
      "xccdf_org.ssgproject.content_rule_ensure_gpgcheck_globally_activated",
      "xccdf_org.ssgproject.content_rule_ensure_journald_and_rsyslog_not_active_together",
      "xccdf_org.ssgproject.content_rule_file_groupowner_boot_grub2",
      "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue",
      "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue_net",
      "xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd",
      "xccdf_org.ssgproject.content_rule_file_owner_boot_grub2",
      "xccdf_org.ssgproject.content_rule_file_owner_etc_issue",
      "xccdf_org.ssgproject.content_rule_file_owner_etc_issue_net",
      "xccdf_org.ssgproject.content_rule_file_owner_etc_motd",
      "xccdf_org.ssgproject.content_rule_file_permissions_boot_grub2",
      "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue",
      "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue_net",
      "xccdf_org.ssgproject.content_rule_file_permissions_etc_motd",
      "xccdf_org.ssgproject.content_rule_file_permissions_unauthorized_world_writable",
      "xccdf_org.ssgproject.content_rule_grub2_enable_selinux",
      "xccdf_org.ssgproject.content_rule_journald_compress",
      "xccdf_org.ssgproject.content_rule_journald_disable_forward_to_syslog",
      "xccdf_org.ssgproject.content_rule_journald_storage",
      "xccdf_org.ssgproject.content_rule_kernel_module_cramfs_disabled",
      "xccdf_org.ssgproject.content_rule_kernel_module_freevxfs_disabled",
      "xccdf_org.ssgproject.content_rule_kernel_module_hfs_disabled",
      "xccdf_org.ssgproject.content_rule_kernel_module_hfsplus_disabled",
      "xccdf_org.ssgproject.content_rule_kernel_module_jffs2_disabled",
      "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled",
      "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_noexec",
      "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_home_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_home_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_noexec",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_noexec",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_var_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_var_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_noexec",
      "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nosuid",
      "xccdf_org.ssgproject.content_rule_no_files_or_dirs_ungroupowned",
      "xccdf_org.ssgproject.content_rule_no_files_or_dirs_unowned_by_user",
      "xccdf_org.ssgproject.content_rule_package_aide_installed",
      "xccdf_org.ssgproject.content_rule_package_libselinux_installed",
      "xccdf_org.ssgproject.content_rule_package_mcstrans_removed",
      "xccdf_org.ssgproject.content_rule_package_sequoia-sq_installed",
      "xccdf_org.ssgproject.content_rule_package_setroubleshoot_removed",
      "xccdf_org.ssgproject.content_rule_partition_for_dev_shm",
      "xccdf_org.ssgproject.content_rule_rsyslog_files_groupownership",
      "xccdf_org.ssgproject.content_rule_rsyslog_files_ownership",
      "xccdf_org.ssgproject.content_rule_rsyslog_files_permissions",
      "xccdf_org.ssgproject.content_rule_selinux_not_disabled",
      "xccdf_org.ssgproject.content_rule_selinux_policytype",
      "xccdf_org.ssgproject.content_rule_service_autofs_disabled",
      "xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled",
      "xccdf_org.ssgproject.content_rule_sysctl_fs_protected_hardlinks",
      "xccdf_org.ssgproject.content_rule_sysctl_fs_suid_dumpable",
      "xccdf_org.ssgproject.content_rule_sysctl_kernel_dmesg_restrict",
      "xccdf_org.ssgproject.content_rule_sysctl_kernel_kptr_restrict",
      "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space",
      "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope"
    ],
    "suppressedConflictRuleIds": [],
    "baselineResultCount": 73,
    "verificationResultCount": 73,
    "baselineMissingRuleIds": [],
    "baselineUnexpectedRuleIds": [],
    "verificationMissingRuleIds": [],
    "verificationUnexpectedRuleIds": [],
    "scoreNotLower": true,
    "failedNotHigher": true,
    "noPassToFailRegressions": true,
    "improvementRequired": true,
    "improvementProven": true,
    "fipsPostReboot": {
      "required": false,
      "setupProofPassed": true,
      "nonPassRuleIds": []
    },
    "pciZeroFindings": {
      "required": false,
      "passed": true,
      "reasons": []
    },
    "runtimeProofAcceptedRuleIds": [],
    "effectiveVerificationFailed": 0,
    "reasons": []
  },
  "fipsSetupProof": null,
  "oracle9PciConvergenceProof": null,
  "oracle9Sdl1ConvergenceProof": null,
  "oracle10Sdl1ConvergenceProof": null,
  "rhel8PciConvergenceProof": null,
  "rhel10Sdl1ConvergenceProof": {
    "version": 1,
    "policyVersion": "rhel10-Hardened-convergence-v1",
    "workflowId": 1548,
    "productId": "cs10",
    "profileId": "xccdf_org.complianceautomator.content_profile_standard_defense_level_1_hardening",
    "architecture": "arm64",
    "targetedRuleIds": [
      "xccdf_org.ssgproject.content_rule_ensure_journald_and_rsyslog_not_active_together"
    ],
    "selectedRuleIdsSha256": "6ea8fcc93d7bfb38e0c60ecee3007843d649d3f470744457f05275f2b53d1b21",
    "repairRuleIds": [
      "xccdf_org.ssgproject.content_rule_ensure_journald_and_rsyslog_not_active_together"
    ],
    "commandSha256": "94ec78a062d4412adec2b6781318ff50207ac31d353a49a41a3a34c04dea6061",
    "outputSha256": "5f037a9d8f8624061606e38386ffb794352c35cf56729db7376bb81c6d3dab3f",
    "outputExcerpt": "__CA_RHEL10_SDL1_CONVERGENCE_VERSION__:rhel10-Hardened-convergence-v1\n__CA_RHEL10_SDL1_ARCHITECTURE__:arm64\n__CA_RHEL10_SDL1_JOURNALD__:active\n__CA_RHEL10_SDL1_RSYSLOG__:inactive-and-masked\n__CA_RHEL10_SDL1_CONVERGENCE__:complete\nRemoved '/etc/systemd/system/multi-user.target.wants/rsyslog.service'.\nCreated symlink '/etc/systemd/system/rsyslog.service' -> '/dev/null'.",
    "exitCode": 0,
    "appliedAt": "2026-09-04T21:56:17.588Z",
    "passed": true
  },
  "almaSdl1ConvergenceProof": null,
  "al2023Sdl1ConvergenceProof": null,
  "rockySdl1ConvergenceProof": null,
  "ubuntu2204PciConvergenceProof": null,
  "ubuntu2404PciConvergenceProof": null,
  "ubuntu2404PciFinalStabilizationProof": null,
  "ubuntu2004PciConvergenceProof": null,
  "ubuntu2004PciFinalStabilizationProof": null,
  "ubuntu2004Sdl1ConvergenceProof": null,
  "ubuntu2404Sdl1ConvergenceProof": null,
  "ubuntu2604Sdl1ConvergenceProof": null,
  "ubuntu2604PciConvergenceProof": null,
  "ubuntu2604PciFinalStabilizationProof": null,
  "rebootDeferredVerification": null
}