{ "generatedAt": "2026-09-04T22:22:42.453Z", "independentVerification": true, "baseline": { "runId": 5114, "targetId": 5114, "score": 70.833336, "passed": 32, "failed": 20 }, "remediation": { "runId": 5115, "targetId": 5115, "score": 84.722221, "passed": 32, "failed": 10, "fixed": 9 }, "convergence": { "attempted": true, "runId": 5117, "targetId": 5117, "score": 100, "passed": 11, "failed": 0, "fixed": 0, "initialVerificationRunId": 5116, "targetedRuleIds": [ "xccdf_org.ssgproject.content_rule_aide_check_audit_tools", "xccdf_org.ssgproject.content_rule_kernel_module_cramfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_freevxfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfsplus_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_jffs2_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled", "xccdf_org.ssgproject.content_rule_package_aide_installed", "xccdf_org.ssgproject.content_rule_rsyslog_files_permissions", "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space", "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope" ] }, "verification": { "runId": 5118, "targetId": 5118, "score": 100, "passed": 52, "failed": 0 }, "delta": { "score": 29.166663999999997, "passedDelta": 20, "failedDelta": -20, "failuresRemaining": 0, "failToPass": 20, "passToFail": 0, "changedRules": 20 }, "transitions": { "failToPass": 20, "passToFail": 0, "unchangedPass": 32, "unchangedFail": 0, "changedRules": 20 }, "rules": [ { "ruleId": "xccdf_org.ssgproject.content_rule_aide_check_audit_tools", "title": "Configure AIDE to Verify the Audit Tools", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_banner_etc_issue_cis", "title": "Ensure Local Login Warning Banner Is Configured Properly", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_banner_etc_issue_net_cis", "title": "Ensure Remote Login Warning Banner Is Configured Properly", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_banner_etc_motd_cis", "title": "Ensure Message Of The Day Is Configured Properly", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_coredump_disable_backtraces", "title": "Disable core dump backtraces", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_coredump_disable_storage", "title": "Disable storing core dump", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_dconf_gnome_banner_enabled", "title": "Enable GNOME3 Login Warning Banner", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_dconf_gnome_login_banner_text", "title": "Set the GNOME3 Login Warning Banner Text", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_dir_perms_world_writable_sticky_bits", "title": "Verify that All World-Writable Directories Have Sticky Bits Set", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_ensure_gpgcheck_globally_activated", "title": "Ensure gpgcheck Enabled In Main dnf Configuration", "severity": "high", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_ensure_gpgcheck_never_disabled", "title": "Ensure gpgcheck Enabled for All dnf Package Repositories", "severity": "high", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue", "title": "Verify Group Ownership of System Login Banner", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue_net", "title": "Verify Group Ownership of System Login Banner for Remote Connections", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd", "title": "Verify Group Ownership of Message of the Day Banner", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_grub2_cfg", "title": "Verify /boot/grub2/grub.cfg Group Ownership", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_user_cfg", "title": "Verify /boot/grub2/user.cfg Group Ownership", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_etc_issue", "title": "Verify ownership of System Login Banner", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_etc_issue_net", "title": "Verify ownership of System Login Banner for Remote Connections", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_etc_motd", "title": "Verify ownership of Message of the Day Banner", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_grub2_cfg", "title": "Verify /boot/grub2/grub.cfg User Ownership", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_user_cfg", "title": "Verify /boot/grub2/user.cfg User Ownership", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue", "title": "Verify permissions on System Login Banner", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue_net", "title": "Verify permissions on System Login Banner for Remote Connections", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_etc_motd", "title": "Verify permissions on Message of the Day Banner", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_grub2_cfg", "title": "Verify /boot/grub2/grub.cfg Permissions", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_unauthorized_world_writable", "title": "Ensure No World-Writable Files Exist", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_ungroupowned", "title": "Ensure All Files Are Owned by a Group", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_user_cfg", "title": "Verify /boot/grub2/user.cfg Permissions", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_grub2_enable_selinux", "title": "Ensure SELinux Not Disabled in /etc/default/grub", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_journald_compress", "title": "Ensure journald is configured to compress large log files", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_journald_storage", "title": "Ensure journald is configured to write log files to persistent disk", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_cramfs_disabled", "title": "Disable Mounting of cramfs", "severity": "low", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_freevxfs_disabled", "title": "Disable Mounting of freevxfs", "severity": "low", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_hfs_disabled", "title": "Disable Mounting of hfs", "severity": "low", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_hfsplus_disabled", "title": "Disable Mounting of hfsplus", "severity": "low", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_jffs2_disabled", "title": "Disable Mounting of jffs2", "severity": "low", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled", "title": "Disable Modprobe Loading of USB Storage Driver", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nodev", "title": "Add nodev Option to /dev/shm", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_noexec", "title": "Add noexec Option to /dev/shm", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nosuid", "title": "Add nosuid Option to /dev/shm", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_home_nodev", "title": "Add nodev Option to /home", "severity": "unknown", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_home_nosuid", "title": "Add nosuid Option to /home", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nodev", "title": "Add nodev Option to /var/log/audit", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_noexec", "title": "Add noexec Option to /var/log/audit", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nosuid", "title": "Add nosuid Option to /var/log/audit", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_nodev", "title": "Add nodev Option to /var/log", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_noexec", "title": "Add noexec Option to /var/log", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_nosuid", "title": "Add nosuid Option to /var/log", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_nodev", "title": "Add nodev Option to /var", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_nosuid", "title": "Add nosuid Option to /var", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nodev", "title": "Add nodev Option to /var/tmp", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_noexec", "title": "Add noexec Option to /var/tmp", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nosuid", "title": "Add nosuid Option to /var/tmp", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_no_files_unowned_by_user", "title": "Ensure All Files Are Owned by a User", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_package_aide_installed", "title": "Install AIDE", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_package_libselinux_installed", "title": "Install libselinux Package", "severity": "high", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_package_mcstrans_removed", "title": "Uninstall mcstrans Package", "severity": "low", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_package_setroubleshoot_removed", "title": "Uninstall setroubleshoot Package", "severity": "low", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_partition_for_dev_shm", "title": "Ensure /dev/shm is configured", "severity": "low", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_files_groupownership", "title": "Ensure Log Files Are Owned By Appropriate Group", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_files_ownership", "title": "Ensure Log Files Are Owned By Appropriate User", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_files_permissions", "title": "Ensure System Log Files Have Correct Permissions", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_selinux_not_disabled", "title": "Ensure SELinux is Not Disabled", "severity": "high", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_selinux_policytype", "title": "Configure SELinux Policy", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_service_autofs_disabled", "title": "Disable the Automounter", "severity": "medium", "before": "notapplicable", "after": "notapplicable", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled", "title": "Enable systemd-journald Service", "severity": "medium", "before": "pass", "after": "pass", "changed": false }, { "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space", "title": "Enable Randomized Layout of Virtual Address Space", "severity": "medium", "before": "fail", "after": "pass", "changed": true }, { "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope", "title": "Restrict usage of ptrace to descendant processes", "severity": "medium", "before": "fail", "after": "pass", "changed": true } ], "verificationGate": { "passed": true, "coverageComplete": true, "selectedControlCount": 68, "expectedResultCount": 68, "expectedResultRuleIds": [ "xccdf_org.ssgproject.content_rule_aide_check_audit_tools", "xccdf_org.ssgproject.content_rule_banner_etc_issue_cis", "xccdf_org.ssgproject.content_rule_banner_etc_issue_net_cis", "xccdf_org.ssgproject.content_rule_banner_etc_motd_cis", "xccdf_org.ssgproject.content_rule_coredump_disable_backtraces", "xccdf_org.ssgproject.content_rule_coredump_disable_storage", "xccdf_org.ssgproject.content_rule_dconf_gnome_banner_enabled", "xccdf_org.ssgproject.content_rule_dconf_gnome_login_banner_text", "xccdf_org.ssgproject.content_rule_dir_perms_world_writable_sticky_bits", "xccdf_org.ssgproject.content_rule_ensure_gpgcheck_globally_activated", "xccdf_org.ssgproject.content_rule_ensure_gpgcheck_never_disabled", "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue", "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue_net", "xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd", "xccdf_org.ssgproject.content_rule_file_groupowner_grub2_cfg", "xccdf_org.ssgproject.content_rule_file_groupowner_user_cfg", "xccdf_org.ssgproject.content_rule_file_owner_etc_issue", "xccdf_org.ssgproject.content_rule_file_owner_etc_issue_net", "xccdf_org.ssgproject.content_rule_file_owner_etc_motd", "xccdf_org.ssgproject.content_rule_file_owner_grub2_cfg", "xccdf_org.ssgproject.content_rule_file_owner_user_cfg", "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue", "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue_net", "xccdf_org.ssgproject.content_rule_file_permissions_etc_motd", "xccdf_org.ssgproject.content_rule_file_permissions_grub2_cfg", "xccdf_org.ssgproject.content_rule_file_permissions_unauthorized_world_writable", "xccdf_org.ssgproject.content_rule_file_permissions_ungroupowned", "xccdf_org.ssgproject.content_rule_file_permissions_user_cfg", "xccdf_org.ssgproject.content_rule_grub2_enable_selinux", "xccdf_org.ssgproject.content_rule_journald_compress", "xccdf_org.ssgproject.content_rule_journald_storage", "xccdf_org.ssgproject.content_rule_kernel_module_cramfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_freevxfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfsplus_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_jffs2_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled", "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nodev", "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_noexec", "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nosuid", "xccdf_org.ssgproject.content_rule_mount_option_home_nodev", "xccdf_org.ssgproject.content_rule_mount_option_home_nosuid", "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nodev", "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_noexec", "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nosuid", "xccdf_org.ssgproject.content_rule_mount_option_var_log_nodev", "xccdf_org.ssgproject.content_rule_mount_option_var_log_noexec", "xccdf_org.ssgproject.content_rule_mount_option_var_log_nosuid", "xccdf_org.ssgproject.content_rule_mount_option_var_nodev", "xccdf_org.ssgproject.content_rule_mount_option_var_nosuid", "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nodev", "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_noexec", "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nosuid", "xccdf_org.ssgproject.content_rule_no_files_unowned_by_user", "xccdf_org.ssgproject.content_rule_package_aide_installed", "xccdf_org.ssgproject.content_rule_package_libselinux_installed", "xccdf_org.ssgproject.content_rule_package_mcstrans_removed", "xccdf_org.ssgproject.content_rule_package_setroubleshoot_removed", "xccdf_org.ssgproject.content_rule_partition_for_dev_shm", "xccdf_org.ssgproject.content_rule_rsyslog_files_groupownership", "xccdf_org.ssgproject.content_rule_rsyslog_files_ownership", "xccdf_org.ssgproject.content_rule_rsyslog_files_permissions", "xccdf_org.ssgproject.content_rule_selinux_not_disabled", "xccdf_org.ssgproject.content_rule_selinux_policytype", "xccdf_org.ssgproject.content_rule_service_autofs_disabled", "xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled", "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space", "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope" ], "suppressedConflictRuleIds": [], "baselineResultCount": 68, "verificationResultCount": 68, "baselineMissingRuleIds": [], "baselineUnexpectedRuleIds": [], "verificationMissingRuleIds": [], "verificationUnexpectedRuleIds": [], "scoreNotLower": true, "failedNotHigher": true, "noPassToFailRegressions": true, "improvementRequired": true, "improvementProven": true, "fipsPostReboot": { "required": false, "setupProofPassed": true, "nonPassRuleIds": [] }, "pciZeroFindings": { "required": false, "passed": true, "reasons": [] }, "runtimeProofAcceptedRuleIds": [], "effectiveVerificationFailed": 0, "reasons": [] }, "fipsSetupProof": null, "oracle9PciConvergenceProof": null, "oracle9Sdl1ConvergenceProof": null, "oracle10Sdl1ConvergenceProof": null, "rhel8PciConvergenceProof": null, "rhel10Sdl1ConvergenceProof": null, "almaSdl1ConvergenceProof": null, "al2023Sdl1ConvergenceProof": null, "rockySdl1ConvergenceProof": { "version": 1, "policyVersion": "rocky-Hardened-convergence-v3", "workflowId": 1558, "productId": "rocky9", "profileId": "xccdf_org.complianceautomator.content_profile_standard_defense_level_1_hardening", "architecture": "arm64", "targetedRuleIds": [ "xccdf_org.ssgproject.content_rule_aide_check_audit_tools", "xccdf_org.ssgproject.content_rule_kernel_module_cramfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_freevxfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfsplus_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_jffs2_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled", "xccdf_org.ssgproject.content_rule_package_aide_installed", "xccdf_org.ssgproject.content_rule_rsyslog_files_permissions", "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space", "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope" ], "selectedRuleIdsSha256": "51bf767df492d7fa69e51034bd8e085b6dbc31f11d78cdcc64c17ab4da2a4b64", "repairRuleIds": [ "xccdf_org.ssgproject.content_rule_aide_check_audit_tools", "xccdf_org.ssgproject.content_rule_kernel_module_cramfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_freevxfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfs_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_hfsplus_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_jffs2_disabled", "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled", "xccdf_org.ssgproject.content_rule_package_aide_installed", "xccdf_org.ssgproject.content_rule_rsyslog_files_permissions", "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space", "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope" ], "commandSha256": "0870f12e3aa08ebe5448ce895dc9cba233df8bcbc653d558d2ee81decf2a2d07", "outputSha256": "05f1b5df4648f9d6921585239b72ae648a16c5895260d370853064b75556235d", "outputExcerpt": "__CA_ROCKY_SDL1_CONVERGENCE_VERSION__:rocky-Hardened-convergence-v3\n__CA_ROCKY_SDL1_PRODUCT__:rocky9\n__CA_ROCKY_SDL1_ARCHITECTURE__:arm64\nLast metadata expiration check: 0:01:42 ago on Fri Sep 4 22:19:45 2026.\nDependencies resolved.\n================================================================================\n Package Architecture Version Repository Size\n================================================================================\nInstalling:\n aide aarch64 0.19.2-5.el9_8.1 appstream 158 k\n\nTransaction Summary\n================================================================================\nInstall 1 Package\n\nTotal download size: 158 k\nInstalled size: 421 k\nDownloading Packages:\naide-0.19.2-5.el9_8.1.aarch64.rpm 451 kB/s | 158 kB 00:00 \n--------------------------------------------------------------------------------\nTotal 379 kB/s | 158 kB 00:00 \nRunning transaction check\nTransaction check succeeded.\nRunning transaction test\nTransaction test succeeded.\nRunning transaction\n Preparing : 1/1 \n Installing : aide-0.19.2-5.el9_8.1.aarch64 1/1 \n Running scriptlet: aide-0.19.2-5.el9_8.1.aarch64 1/1 \n Verifying : aide-0.19.2-5.el9_8.1.aarch64 1/1 \n\nInstalled:\n aide-0.19.2-5.el9_8.1.aarch64 \n\nComplete!\n__CA_ROCKY_SDL1_AIDE_AUDIT_TOOLS__:configured\nStart timestamp: 2026-09-04 22:21:28 +0000 (AIDE 0.19.2)\nAIDE successfully initialized database.\nNew AIDE database written to /var/lib/aide/aide.db.new.gz\n\nNumber of entries:\t37375\n\n---------------------------------------------------\nThe attributes of the (uncompressed) database(s):\n---------------------------------------------------\n\n/var/lib/aide/aide.db.new.gz\n SHA256 : xBtFoK7a0rEMiI6pKbdj22t79fCTQucT\n Pkv1wIzNlnk=\n SHA512 : Im8eRwnmGMn8rK4WQGccAU6knWFuiCUv\n Smdc16n/GMIBppp2IT43cB13Bc21vzFo\n nv6Ad5auUOXHTGQp+8cVSA==\n STRIBOG256: d9foqKYeP0ThWxSZjhVV9XPeFINHMn7Q\n 5zCzv3Q+5wQ=\n STRIBOG512: JtyFYKNOCUprz5B3t/AsZCsZAfnKUHZZ\n XxXV8pr835Uno1D4R8diUAjFaWGDAady\n xO85GSwm6EBXSSY+CFwGGg==\n SHA512/256: 8eJAO1QPAdFr1OpqcA1b6EVpknt0XSub\n rjm9+gjl0zQ=\n SHA3-256 : tmXSA/Y2svgDy9bpJFq6DOtHN2L7MxTB\n 3/IDIN+WD8U=\n SHA3-512 : UvLls9KmvAErPKeXmZVuLrT1vQ/lm3m9\n NuDGZkMdzlbPEXLGiivZFxZl1uj9YYqJ\n LMMTKjquMh9jlnhdWVZVBQ==\n\n\nEnd timestamp: 2026-09-04 22:21:59 +0000 (run time: 0m 31s)\n__CA_ROCKY_SDL1_AIDE_DATABASE_CONFIG__:database_in\n__CA_ROCKY_SDL1_AIDE_DATABASE__:initialized\n__CA_ROCKY_SDL1_AIDE_PACKAGE__:installed\n__CA_ROCKY_SDL1_MODULES__:disabled\n__CA_ROCKY_SDL1_SYSCTLS__:configured\n__CA_ROCKY_SDL1_RSYSLOG_PERMISSIONS__:constrained\n__CA_ROCKY_SDL1_CONVERGENCE__:complete", "exitCode": 0, "appliedAt": "2026-09-04T22:22:00.648Z", "passed": true }, "ubuntu2204PciConvergenceProof": null, "ubuntu2404PciConvergenceProof": null, "ubuntu2404PciFinalStabilizationProof": null, "ubuntu2004PciConvergenceProof": null, "ubuntu2004PciFinalStabilizationProof": null, "ubuntu2004Sdl1ConvergenceProof": null, "ubuntu2404Sdl1ConvergenceProof": null, "ubuntu2604Sdl1ConvergenceProof": null, "ubuntu2604PciConvergenceProof": null, "ubuntu2604PciFinalStabilizationProof": null, "rebootDeferredVerification": null }