{
  "generatedAt": "2026-09-04T22:55:21.750Z",
  "independentVerification": true,
  "baseline": {
    "runId": 5159,
    "targetId": 5159,
    "score": 30,
    "passed": 5,
    "failed": 9
  },
  "remediation": {
    "runId": 5161,
    "targetId": 5161,
    "score": 100,
    "passed": 5,
    "failed": 0,
    "fixed": 9
  },
  "convergence": {
    "attempted": true,
    "runId": 5170,
    "targetId": 5170,
    "score": 100,
    "passed": 0,
    "failed": 0,
    "fixed": 1,
    "initialVerificationRunId": 5166,
    "targetedRuleIds": [
      "xccdf_org.ssgproject.content_rule_aide_periodic_checking_systemd_timer"
    ]
  },
  "verification": {
    "runId": 5171,
    "targetId": 5171,
    "score": 100,
    "passed": 15,
    "failed": 0
  },
  "delta": {
    "score": 70,
    "passedDelta": 10,
    "failedDelta": -9,
    "failuresRemaining": 0,
    "failToPass": 9,
    "passToFail": 0,
    "changedRules": 10
  },
  "transitions": {
    "failToPass": 9,
    "passToFail": 0,
    "unchangedPass": 5,
    "unchangedFail": 0,
    "changedRules": 10
  },
  "rules": [
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_aide_build_database",
      "title": "Build and Test AIDE Database",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_aide_periodic_checking_systemd_timer",
      "title": "Configure Systemd Timer Execution of AIDE",
      "severity": "medium",
      "before": "notapplicable",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_grub2_cfg",
      "title": "Verify /boot/grub/grub.cfg User Ownership",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_grub2_cfg",
      "title": "Verify /boot/grub/grub.cfg Permissions",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_unauthorized_world_writable",
      "title": "Ensure No World-Writable Files Exist",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_ungroupowned",
      "title": "Ensure All Files Are Owned by a Group",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_grub2_enable_apparmor",
      "title": "Ensure AppArmor is enabled in the bootloader configuration",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_home_nosuid",
      "title": "Add nosuid Option to /home",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_noexec",
      "title": "Add noexec Option to /var/log",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_nosuid",
      "title": "Add nosuid Option to /var/log",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_nosuid",
      "title": "Add nosuid Option to /var",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_noexec",
      "title": "Add noexec Option to /var/tmp",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nosuid",
      "title": "Add nosuid Option to /var/tmp",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_no_files_unowned_by_user",
      "title": "Ensure All Files Are Owned by a User",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_aide_installed",
      "title": "Install AIDE",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_apparmor_installed",
      "title": "Ensure AppArmor is installed",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_rsyslog_installed",
      "title": "Ensure rsyslog is Installed",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_service_rsyslog_enabled",
      "title": "Enable rsyslog Service",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_fs_suid_dumpable",
      "title": "Disable Core Dumps for SUID programs",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space",
      "title": "Enable Randomized Layout of Virtual Address Space",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope",
      "title": "Restrict usage of ptrace to descendant processes",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    }
  ],
  "verificationGate": {
    "passed": true,
    "coverageComplete": true,
    "selectedControlCount": 21,
    "expectedResultCount": 21,
    "expectedResultRuleIds": [
      "xccdf_org.ssgproject.content_rule_aide_build_database",
      "xccdf_org.ssgproject.content_rule_aide_periodic_checking_systemd_timer",
      "xccdf_org.ssgproject.content_rule_file_owner_grub2_cfg",
      "xccdf_org.ssgproject.content_rule_file_permissions_grub2_cfg",
      "xccdf_org.ssgproject.content_rule_file_permissions_unauthorized_world_writable",
      "xccdf_org.ssgproject.content_rule_file_permissions_ungroupowned",
      "xccdf_org.ssgproject.content_rule_grub2_enable_apparmor",
      "xccdf_org.ssgproject.content_rule_mount_option_home_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_noexec",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_var_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_noexec",
      "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nosuid",
      "xccdf_org.ssgproject.content_rule_no_files_unowned_by_user",
      "xccdf_org.ssgproject.content_rule_package_aide_installed",
      "xccdf_org.ssgproject.content_rule_package_apparmor_installed",
      "xccdf_org.ssgproject.content_rule_package_rsyslog_installed",
      "xccdf_org.ssgproject.content_rule_service_rsyslog_enabled",
      "xccdf_org.ssgproject.content_rule_sysctl_fs_suid_dumpable",
      "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space",
      "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope"
    ],
    "suppressedConflictRuleIds": [],
    "baselineResultCount": 21,
    "verificationResultCount": 21,
    "baselineMissingRuleIds": [],
    "baselineUnexpectedRuleIds": [],
    "verificationMissingRuleIds": [],
    "verificationUnexpectedRuleIds": [],
    "scoreNotLower": true,
    "failedNotHigher": true,
    "noPassToFailRegressions": true,
    "improvementRequired": true,
    "improvementProven": true,
    "fipsPostReboot": {
      "required": false,
      "setupProofPassed": true,
      "nonPassRuleIds": []
    },
    "pciZeroFindings": {
      "required": false,
      "passed": true,
      "reasons": []
    },
    "runtimeProofAcceptedRuleIds": [],
    "effectiveVerificationFailed": 0,
    "reasons": []
  },
  "fipsSetupProof": null,
  "oracle9PciConvergenceProof": null,
  "oracle9Sdl1ConvergenceProof": null,
  "oracle10Sdl1ConvergenceProof": null,
  "rhel8PciConvergenceProof": null,
  "rhel10Sdl1ConvergenceProof": null,
  "almaSdl1ConvergenceProof": null,
  "al2023Sdl1ConvergenceProof": null,
  "rockySdl1ConvergenceProof": null,
  "ubuntu2204PciConvergenceProof": null,
  "ubuntu2404PciConvergenceProof": null,
  "ubuntu2404PciFinalStabilizationProof": null,
  "ubuntu2004PciConvergenceProof": null,
  "ubuntu2004PciFinalStabilizationProof": null,
  "ubuntu2004Sdl1ConvergenceProof": null,
  "ubuntu2404Sdl1ConvergenceProof": null,
  "ubuntu2604Sdl1ConvergenceProof": null,
  "ubuntu2604PciConvergenceProof": null,
  "ubuntu2604PciFinalStabilizationProof": null,
  "rebootDeferredVerification": null
}