{ "generatedAt": "2026-09-04T22:10:18.429Z", "independentVerification": true, "baseline": { "runId": 5095, "targetId": 5095, "score": 67.291664, "passed": 30, "failed": 26 }, "remediation": { "runId": 5097, "targetId": 5097, "score": 84.583328, "passed": 30, "failed": 14, "fixed": 12 }, "convergence": { "attempted": true, "runId": 5103, "targetId": 5103, "score": 100, "passed": 14, "failed": 0, "fixed": 0, "initialVerificationRunId": 5101, "targetedRuleIds": [ "xccdf_org.ssgproject.content_rule_aide_build_database", "xccdf_org.ssgproject.content_rule_aide_check_audit_tools", "xccdf_org.ssgproject.content_rule_disable_users_coredumps", "xccdf_org.ssgproject.content_rule_kernel_module_cramfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_freevxfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfsplus_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_jffs2_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled", "xccdf_org.ssgproject.content_rule_package_aide_installed", "xccdf_org.ssgproject.content_rule_sysctl_fs_suid_dumpable", "xccdf_org.ssgproject.content_rule_sysctl_kernel_dmesg_restrict", "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space", "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope" ] }, "verification": { "runId": 5105, "targetId": 5105, "score": 100, "passed": 56, "failed": 0 }, "delta": { "score": 32.708336, "passedDelta": 26, "failedDelta": -26, "failuresRemaining": 0, "failToPass": 26, "passToFail": 0, "changedRules": 26 }, "transitions": { "failToPass": 26, "passToFail": 0, "unchangedPass": 30, "unchangedFail": 0, "changedRules": 26 }, "rules": [ { "ruleId": "xccdf_org.ssgproject.content_rule_aide_build_database", "title": "Build and Test AIDE Database", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_aide_check_audit_tools", "title": "Configure AIDE to Verify the Audit Tools", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_banner_etc_issue_cis", "title": "Ensure Local Login Warning Banner Is Configured Properly", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_banner_etc_issue_net_cis", "title": "Ensure Remote Login Warning Banner Is Configured Properly", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_banner_etc_motd_cis", "title": "Ensure Message Of The Day Is Configured Properly", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_coredump_disable_backtraces", "title": "Disable core dump backtraces", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_coredump_disable_storage", "title": "Disable storing core dump", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_dconf_gnome_banner_enabled", "title": "Enable GNOME3 Login Warning Banner", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_dconf_gnome_login_banner_text", "title": "Set the GNOME3 Login Warning Banner Text", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_dir_perms_world_writable_sticky_bits", "title": "Verify that All World-Writable Directories Have Sticky Bits Set", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_disable_users_coredumps", "title": "Disable Core Dumps for All Users", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_ensure_gpgcheck_globally_activated", "title": "Ensure gpgcheck Enabled In Main dnf Configuration", "severity": "high", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_ensure_gpgcheck_never_disabled", "title": "Ensure gpgcheck Enabled for All dnf Package Repositories", "severity": "high", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue", "title": "Verify Group Ownership of System Login Banner", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue_net", "title": "Verify Group Ownership of System Login Banner for Remote Connections", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd", "title": "Verify Group Ownership of Message of the Day Banner", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_grub2_cfg", "title": "Verify /boot/grub2/grub.cfg Group Ownership", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_user_cfg", "title": "Verify /boot/grub2/user.cfg Group Ownership", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_etc_issue", "title": "Verify ownership of System Login Banner", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_etc_issue_net", "title": "Verify ownership of System Login Banner for Remote Connections", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_etc_motd", "title": "Verify ownership of Message of the Day Banner", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_grub2_cfg", "title": "Verify /boot/grub2/grub.cfg User Ownership", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_user_cfg", "title": "Verify /boot/grub2/user.cfg User Ownership", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue", "title": "Verify permissions on System Login Banner", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue_net", "title": "Verify permissions on System Login Banner for Remote Connections", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_etc_motd", "title": "Verify permissions on Message of the Day Banner", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_grub2_cfg", "title": "Verify /boot/grub2/grub.cfg Permissions", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_unauthorized_world_writable", "title": "Ensure No World-Writable Files Exist", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_user_cfg", "title": "Verify /boot/grub2/user.cfg Permissions", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_grub2_enable_selinux", "title": "Ensure SELinux Not Disabled in /etc/default/grub", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_journald_compress", "title": "Ensure journald is configured to compress large log files", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_journald_disable_forward_to_syslog", "title": "Ensure journald ForwardToSyslog is disabled", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_journald_storage", "title": "Ensure journald is configured to write log files to persistent disk", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_cramfs_disabled", "title": "Disable Mounting of cramfs", "severity": "low", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_freevxfs_disabled", "title": "Disable Mounting of freevxfs", "severity": "low", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_hfs_disabled", "title": "Disable Mounting of hfs", "severity": "low", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_hfsplus_disabled", "title": "Disable Mounting of hfsplus", "severity": "low", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_jffs2_disabled", "title": "Disable Mounting of jffs2", "severity": "low", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled", "title": "Disable Modprobe Loading of USB Storage Driver", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nodev", "title": "Add nodev Option to /dev/shm", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_noexec", "title": "Add noexec Option to /dev/shm", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nosuid", "title": "Add nosuid Option to /dev/shm", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_home_nodev", "title": "Add nodev Option to /home", "severity": "unknown", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_home_nosuid", "title": "Add nosuid Option to /home", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nodev", "title": "Add nodev Option to /var/log/audit", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_noexec", "title": "Add noexec Option to /var/log/audit", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nosuid", "title": "Add nosuid Option to /var/log/audit", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_nodev", "title": "Add nodev Option to /var/log", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_noexec", "title": "Add noexec Option to /var/log", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_nosuid", "title": "Add nosuid Option to /var/log", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_nodev", "title": "Add nodev Option to /var", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_nosuid", "title": "Add nosuid Option to /var", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nodev", "title": "Add nodev Option to /var/tmp", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_noexec", "title": "Add noexec Option to /var/tmp", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nosuid", "title": "Add nosuid Option to /var/tmp", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_no_files_or_dirs_ungroupowned", "title": "Ensure All Files And Directories Are Owned by a Group", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_no_files_or_dirs_unowned_by_user", "title": "Ensure All Files And Directories Are Owned by a User", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_package_aide_installed", "title": "Install AIDE", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_package_libselinux_installed", "title": "Install libselinux Package", "severity": "high", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_package_mcstrans_removed", "title": "Uninstall mcstrans Package", "severity": "low", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_package_rsyslog_installed", "title": "Ensure rsyslog is Installed", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_package_setroubleshoot_removed", "title": "Uninstall setroubleshoot Package", "severity": "low", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_partition_for_dev_shm", "title": "Ensure /dev/shm is configured", "severity": "low", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_filecreatemode", "title": "Ensure rsyslog Default File Permissions Configured", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_files_groupownership", "title": "Ensure Log Files Are Owned By Appropriate Group", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_files_ownership", "title": "Ensure Log Files Are Owned By Appropriate User", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_files_permissions", "title": "Ensure System Log Files Have Correct Permissions", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_selinux_not_disabled", "title": "Ensure SELinux is Not Disabled", "severity": "high", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_selinux_policytype", "title": "Configure SELinux Policy", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_service_autofs_disabled", "title": "Disable the Automounter", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_service_rsyslog_enabled", "title": "Enable rsyslog Service", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled", "title": "Enable systemd-journald Service", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_fs_protected_hardlinks", "title": "Enable Kernel Parameter to Enforce DAC on Hardlinks", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_fs_suid_dumpable", "title": "Disable Core Dumps for SUID programs", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_dmesg_restrict", "title": "Restrict Access to Kernel Message Buffer", "severity": "low", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_kptr_restrict", "title": "Restrict Exposed Kernel Pointer Addresses Access", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space", "title": "Enable Randomized Layout of Virtual Address Space", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope", "title": "Restrict usage of ptrace to descendant processes", "severity": "medium", "before": "fail", "after": "pass", "changed": true } ], "verificationGate": { "passed": true, "coverageComplete": true, "selectedControlCount": 78, "expectedResultCount": 78, "expectedResultRuleIds": [ "xccdf_org.ssgproject.content_rule_aide_build_database", "xccdf_org.ssgproject.content_rule_aide_check_audit_tools", "xccdf_org.ssgproject.content_rule_banner_etc_issue_cis", "xccdf_org.ssgproject.content_rule_banner_etc_issue_net_cis", "xccdf_org.ssgproject.content_rule_banner_etc_motd_cis", "xccdf_org.ssgproject.content_rule_coredump_disable_backtraces", "xccdf_org.ssgproject.content_rule_coredump_disable_storage", "xccdf_org.ssgproject.content_rule_dconf_gnome_banner_enabled", "xccdf_org.ssgproject.content_rule_dconf_gnome_login_banner_text", "xccdf_org.ssgproject.content_rule_dir_perms_world_writable_sticky_bits", "xccdf_org.ssgproject.content_rule_disable_users_coredumps", "xccdf_org.ssgproject.content_rule_ensure_gpgcheck_globally_activated", "xccdf_org.ssgproject.content_rule_ensure_gpgcheck_never_disabled", "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue", "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue_net", "xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd", "xccdf_org.ssgproject.content_rule_file_groupowner_grub2_cfg", "xccdf_org.ssgproject.content_rule_file_groupowner_user_cfg", "xccdf_org.ssgproject.content_rule_file_owner_etc_issue", "xccdf_org.ssgproject.content_rule_file_owner_etc_issue_net", "xccdf_org.ssgproject.content_rule_file_owner_etc_motd", "xccdf_org.ssgproject.content_rule_file_owner_grub2_cfg", "xccdf_org.ssgproject.content_rule_file_owner_user_cfg", "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue", "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue_net", "xccdf_org.ssgproject.content_rule_file_permissions_etc_motd", "xccdf_org.ssgproject.content_rule_file_permissions_grub2_cfg", "xccdf_org.ssgproject.content_rule_file_permissions_unauthorized_world_writable", "xccdf_org.ssgproject.content_rule_file_permissions_user_cfg", "xccdf_org.ssgproject.content_rule_grub2_enable_selinux", "xccdf_org.ssgproject.content_rule_journald_compress", "xccdf_org.ssgproject.content_rule_journald_disable_forward_to_syslog", "xccdf_org.ssgproject.content_rule_journald_storage", "xccdf_org.ssgproject.content_rule_kernel_module_cramfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_freevxfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfsplus_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_jffs2_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled", "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nodev", "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_noexec", "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nosuid", "xccdf_org.ssgproject.content_rule_mount_option_home_nodev", "xccdf_org.ssgproject.content_rule_mount_option_home_nosuid", "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nodev", "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_noexec", "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nosuid", "xccdf_org.ssgproject.content_rule_mount_option_var_log_nodev", "xccdf_org.ssgproject.content_rule_mount_option_var_log_noexec", "xccdf_org.ssgproject.content_rule_mount_option_var_log_nosuid", "xccdf_org.ssgproject.content_rule_mount_option_var_nodev", "xccdf_org.ssgproject.content_rule_mount_option_var_nosuid", "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nodev", "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_noexec", "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nosuid", "xccdf_org.ssgproject.content_rule_no_files_or_dirs_ungroupowned", "xccdf_org.ssgproject.content_rule_no_files_or_dirs_unowned_by_user", "xccdf_org.ssgproject.content_rule_package_aide_installed", "xccdf_org.ssgproject.content_rule_package_libselinux_installed", "xccdf_org.ssgproject.content_rule_package_mcstrans_removed", "xccdf_org.ssgproject.content_rule_package_rsyslog_installed", "xccdf_org.ssgproject.content_rule_package_setroubleshoot_removed", "xccdf_org.ssgproject.content_rule_partition_for_dev_shm", "xccdf_org.ssgproject.content_rule_rsyslog_filecreatemode", "xccdf_org.ssgproject.content_rule_rsyslog_files_groupownership", "xccdf_org.ssgproject.content_rule_rsyslog_files_ownership", "xccdf_org.ssgproject.content_rule_rsyslog_files_permissions", "xccdf_org.ssgproject.content_rule_selinux_not_disabled", "xccdf_org.ssgproject.content_rule_selinux_policytype", "xccdf_org.ssgproject.content_rule_service_autofs_disabled", "xccdf_org.ssgproject.content_rule_service_rsyslog_enabled", "xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled", "xccdf_org.ssgproject.content_rule_sysctl_fs_protected_hardlinks", "xccdf_org.ssgproject.content_rule_sysctl_fs_suid_dumpable", "xccdf_org.ssgproject.content_rule_sysctl_kernel_dmesg_restrict", "xccdf_org.ssgproject.content_rule_sysctl_kernel_kptr_restrict", "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space", "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope" ], "suppressedConflictRuleIds": [], "baselineResultCount": 78, "verificationResultCount": 78, "baselineMissingRuleIds": [], "baselineUnexpectedRuleIds": [], "verificationMissingRuleIds": [], "verificationUnexpectedRuleIds": [], "scoreNotLower": true, "failedNotHigher": true, "noPassToFailRegressions": true, "improvementRequired": true, "improvementProven": true, "fipsPostReboot": { "required": false, "setupProofPassed": true, "nonPassRuleIds": [] }, "pciZeroFindings": { "required": false, "passed": true, "reasons": [] }, "runtimeProofAcceptedRuleIds": [], "effectiveVerificationFailed": 0, "reasons": [] }, "fipsSetupProof": null, "oracle9PciConvergenceProof": null, "oracle9Sdl1ConvergenceProof": null, "oracle10Sdl1ConvergenceProof": null, "rhel8PciConvergenceProof": null, "rhel10Sdl1ConvergenceProof": null, "almaSdl1ConvergenceProof": null, "al2023Sdl1ConvergenceProof": null, "rockySdl1ConvergenceProof": { "version": 1, "policyVersion": "rocky-Hardened-convergence-v3", "workflowId": 1557, "productId": "rocky8", "profileId": "xccdf_org.complianceautomator.content_profile_standard_defense_level_1_hardening", "architecture": "x86_64", "targetedRuleIds": [ "xccdf_org.ssgproject.content_rule_aide_build_database", "xccdf_org.ssgproject.content_rule_aide_check_audit_tools", "xccdf_org.ssgproject.content_rule_disable_users_coredumps", "xccdf_org.ssgproject.content_rule_kernel_module_cramfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_freevxfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfsplus_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_jffs2_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled", "xccdf_org.ssgproject.content_rule_package_aide_installed", "xccdf_org.ssgproject.content_rule_sysctl_fs_suid_dumpable", "xccdf_org.ssgproject.content_rule_sysctl_kernel_dmesg_restrict", "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space", "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope" ], "selectedRuleIdsSha256": "e123519ca15230a73257cd919da72111fe52ae8373be1d58d3c261d9bca80f0c", "repairRuleIds": [ "xccdf_org.ssgproject.content_rule_aide_build_database", "xccdf_org.ssgproject.content_rule_aide_check_audit_tools", "xccdf_org.ssgproject.content_rule_disable_users_coredumps", "xccdf_org.ssgproject.content_rule_kernel_module_cramfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_freevxfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfsplus_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_jffs2_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled", "xccdf_org.ssgproject.content_rule_package_aide_installed", "xccdf_org.ssgproject.content_rule_sysctl_fs_suid_dumpable", "xccdf_org.ssgproject.content_rule_sysctl_kernel_dmesg_restrict", "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space", "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope" ], "commandSha256": "abcc628be25127124a910b2983ce0cc53b4b46674503c2d63b4df618f4dc2c5c", "outputSha256": "052bce569bb220c4fc0e13f0347627607751027ef228c18891a14906bc2ecf05", "outputExcerpt": "__CA_ROCKY_SDL1_CONVERGENCE_VERSION__:rocky-Hardened-convergence-v3\n__CA_ROCKY_SDL1_PRODUCT__:rocky8\n__CA_ROCKY_SDL1_ARCHITECTURE__:x86_64\nLast metadata expiration check: 0:01:58 ago on Fri Sep 4 22:06:56 2026.\nDependencies resolved.\n================================================================================\n Package Architecture Version Repository Size\n================================================================================\nInstalling:\n aide x86_64 0.16-15.el8_10.2 appstream 157 k\n\nTransaction Summary\n================================================================================\nInstall 1 Package\n\nTotal download size: 157 k\nInstalled size: 370 k\nDownloading Packages:\naide-0.16-15.el8_10.2.x86_64.rpm 210 kB/s | 157 kB 00:00 \n--------------------------------------------------------------------------------\nTotal 195 kB/s | 157 kB 00:00 \nRunning transaction check\nTransaction check succeeded.\nRunning transaction test\nTransaction test succeeded.\nRunning transaction\n Preparing : 1/1 \n Installing : aide-0.16-15.el8_10.2.x86_64 1/1 \n Running scriptlet: aide-0.16-15.el8_10.2.x86_64 1/1 \n Verifying : aide-0.16-15.el8_10.2.x86_64 1/1 \n\nInstalled:\n aide-0.16-15.el8_10.2.x86_64 \n\nComplete!\n__CA_ROCKY_SDL1_AIDE_AUDIT_TOOLS__:configured\nStart timestamp: 2026-09-04 22:08:57 +0000 (AIDE 0.16)\nAIDE initialized database at /var/lib/aide/aide.db.new.gz\n\nNumber of entries:\t42928\n\n---------------------------------------------------\nThe attributes of the (uncompressed) database(s):\n---------------------------------------------------\n\n/var/lib/aide/aide.db.new.gz\n MD5 : BzZVLZmFir2vCfKaFN0nFw==\n SHA1 : xAsXUIUhPyQzJDCgAGHJHQiNazQ=\n RMD160 : tIfF62u6GsPpYEcKRqjsyh93Urs=\n TIGER : XcmHOyHZaYBhOEQjLljtmkWKaSQJ4ZdY\n SHA256 : aIxSVVAla0s37z7p2c4E4MEqlG0UAA/R\n HWnIbbpgk00=\n SHA512 : LW117CydZpjBv+RmIiJjLoVcnwj3dhOH\n IV7P91kkrTYdwKoP5yd8jHZlZF7+y6Ui\n O+iGHlO468eYDGjcmJ9XJw==\n\n\nEnd timestamp: 2026-09-04 22:09:30 +0000 (run time: 0m 33s)\n__CA_ROCKY_SDL1_AIDE_DATABASE__:initialized\n__CA_ROCKY_SDL1_AIDE_PACKAGE__:installed\n__CA_ROCKY_SDL1_MODULES__:disabled\n__CA_ROCKY_SDL1_SYSCTLS__:configured\n__CA_ROCKY_SDL1_CORE_DUMPS__:disabled\n__CA_ROCKY_SDL1_CONVERGENCE__:complete", "exitCode": 0, "appliedAt": "2026-09-04T22:09:31.119Z", "passed": true }, "ubuntu2204PciConvergenceProof": null, "ubuntu2404PciConvergenceProof": null, "ubuntu2404PciFinalStabilizationProof": null, "ubuntu2004PciConvergenceProof": null, "ubuntu2004PciFinalStabilizationProof": null, "ubuntu2004Sdl1ConvergenceProof": null, "ubuntu2404Sdl1ConvergenceProof": null, "ubuntu2604Sdl1ConvergenceProof": null, "ubuntu2604PciConvergenceProof": null, "ubuntu2604PciFinalStabilizationProof": null, "rebootDeferredVerification": null }