{
  "generatedAt": "2026-09-04T23:39:12.752Z",
  "independentVerification": true,
  "baseline": {
    "runId": 5218,
    "targetId": 5218,
    "score": 76.875,
    "passed": 17,
    "failed": 14
  },
  "remediation": {
    "runId": 5220,
    "targetId": 5220,
    "score": 100,
    "passed": 17,
    "failed": 0,
    "fixed": 14
  },
  "convergence": null,
  "verification": {
    "runId": 5224,
    "targetId": 5224,
    "score": 100,
    "passed": 31,
    "failed": 0
  },
  "delta": {
    "score": 23.125,
    "passedDelta": 14,
    "failedDelta": -14,
    "failuresRemaining": 0,
    "failToPass": 14,
    "passToFail": 0,
    "changedRules": 14
  },
  "transitions": {
    "failToPass": 14,
    "passToFail": 0,
    "unchangedPass": 17,
    "unchangedFail": 0,
    "changedRules": 14
  },
  "rules": [
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_aide_build_database",
      "title": "Build and Test AIDE Database",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_aide_check_audit_tools",
      "title": "Configure AIDE to Verify the Audit Tools",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_coredump_disable_backtraces",
      "title": "Disable core dump backtraces",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_coredump_disable_storage",
      "title": "Disable storing core dump",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_dconf_gnome_banner_enabled",
      "title": "Enable GNOME3 Login Warning Banner",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_dconf_gnome_login_banner_text",
      "title": "Set the GNOME3 Login Warning Banner Text",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_dir_perms_world_writable_sticky_bits",
      "title": "Verify that All World-Writable Directories Have Sticky Bits Set",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_disable_users_coredumps",
      "title": "Disable Core Dumps for All Users",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_ensure_gpgcheck_globally_activated",
      "title": "Ensure gpgcheck Enabled In Main dnf Configuration",
      "severity": "high",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue_net",
      "title": "Verify Group Ownership of System Login Banner for Remote Connections",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_owner_etc_issue_net",
      "title": "Verify ownership of System Login Banner for Remote Connections",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue_net",
      "title": "Verify permissions on System Login Banner for Remote Connections",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_file_permissions_unauthorized_world_writable",
      "title": "Ensure No World-Writable Files Exist",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_grub2_enable_selinux",
      "title": "Ensure SELinux Not Disabled in /etc/default/grub",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled",
      "title": "Disable Modprobe Loading of USB Storage Driver",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nodev",
      "title": "Add nodev Option to /dev/shm",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_noexec",
      "title": "Add noexec Option to /dev/shm",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nosuid",
      "title": "Add nosuid Option to /dev/shm",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_home_nodev",
      "title": "Add nodev Option to /home",
      "severity": "unknown",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_home_nosuid",
      "title": "Add nosuid Option to /home",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nodev",
      "title": "Add nodev Option to /var/log/audit",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_noexec",
      "title": "Add noexec Option to /var/log/audit",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nosuid",
      "title": "Add nosuid Option to /var/log/audit",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_nodev",
      "title": "Add nodev Option to /var/log",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_noexec",
      "title": "Add noexec Option to /var/log",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_log_nosuid",
      "title": "Add nosuid Option to /var/log",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_nodev",
      "title": "Add nodev Option to /var",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_nosuid",
      "title": "Add nosuid Option to /var",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nodev",
      "title": "Add nodev Option to /var/tmp",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_noexec",
      "title": "Add noexec Option to /var/tmp",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nosuid",
      "title": "Add nosuid Option to /var/tmp",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_aide_installed",
      "title": "Install AIDE",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_libselinux_installed",
      "title": "Install libselinux Package",
      "severity": "high",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_package_setroubleshoot_removed",
      "title": "Uninstall setroubleshoot Package",
      "severity": "low",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_files_groupownership",
      "title": "Ensure Log Files Are Owned By Appropriate Group",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_files_ownership",
      "title": "Ensure Log Files Are Owned By Appropriate User",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_rsyslog_files_permissions",
      "title": "Ensure System Log Files Have Correct Permissions",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_selinux_policytype",
      "title": "Configure SELinux Policy",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_service_autofs_disabled",
      "title": "Disable the Automounter",
      "severity": "medium",
      "before": "notapplicable",
      "after": "notapplicable",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled",
      "title": "Enable systemd-journald Service",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_fs_protected_hardlinks",
      "title": "Enable Kernel Parameter to Enforce DAC on Hardlinks",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_fs_suid_dumpable",
      "title": "Disable Core Dumps for SUID programs",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_dmesg_restrict",
      "title": "Restrict Access to Kernel Message Buffer",
      "severity": "low",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_kptr_restrict",
      "title": "Restrict Exposed Kernel Pointer Addresses Access",
      "severity": "medium",
      "before": "pass",
      "after": "pass",
      "changed": false
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space",
      "title": "Enable Randomized Layout of Virtual Address Space",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    },
    {
      "ruleId": "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope",
      "title": "Restrict usage of ptrace to descendant processes",
      "severity": "medium",
      "before": "fail",
      "after": "pass",
      "changed": true
    }
  ],
  "verificationGate": {
    "passed": true,
    "coverageComplete": true,
    "selectedControlCount": 46,
    "expectedResultCount": 46,
    "expectedResultRuleIds": [
      "xccdf_org.ssgproject.content_rule_aide_build_database",
      "xccdf_org.ssgproject.content_rule_aide_check_audit_tools",
      "xccdf_org.ssgproject.content_rule_coredump_disable_backtraces",
      "xccdf_org.ssgproject.content_rule_coredump_disable_storage",
      "xccdf_org.ssgproject.content_rule_dconf_gnome_banner_enabled",
      "xccdf_org.ssgproject.content_rule_dconf_gnome_login_banner_text",
      "xccdf_org.ssgproject.content_rule_dir_perms_world_writable_sticky_bits",
      "xccdf_org.ssgproject.content_rule_disable_users_coredumps",
      "xccdf_org.ssgproject.content_rule_ensure_gpgcheck_globally_activated",
      "xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue_net",
      "xccdf_org.ssgproject.content_rule_file_owner_etc_issue_net",
      "xccdf_org.ssgproject.content_rule_file_permissions_etc_issue_net",
      "xccdf_org.ssgproject.content_rule_file_permissions_unauthorized_world_writable",
      "xccdf_org.ssgproject.content_rule_grub2_enable_selinux",
      "xccdf_org.ssgproject.content_rule_kernel_module_usb-storage_disabled",
      "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_noexec",
      "xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_home_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_home_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_noexec",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_audit_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_noexec",
      "xccdf_org.ssgproject.content_rule_mount_option_var_log_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_var_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_var_nosuid",
      "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nodev",
      "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_noexec",
      "xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nosuid",
      "xccdf_org.ssgproject.content_rule_package_aide_installed",
      "xccdf_org.ssgproject.content_rule_package_libselinux_installed",
      "xccdf_org.ssgproject.content_rule_package_setroubleshoot_removed",
      "xccdf_org.ssgproject.content_rule_rsyslog_files_groupownership",
      "xccdf_org.ssgproject.content_rule_rsyslog_files_ownership",
      "xccdf_org.ssgproject.content_rule_rsyslog_files_permissions",
      "xccdf_org.ssgproject.content_rule_selinux_policytype",
      "xccdf_org.ssgproject.content_rule_service_autofs_disabled",
      "xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled",
      "xccdf_org.ssgproject.content_rule_sysctl_fs_protected_hardlinks",
      "xccdf_org.ssgproject.content_rule_sysctl_fs_suid_dumpable",
      "xccdf_org.ssgproject.content_rule_sysctl_kernel_dmesg_restrict",
      "xccdf_org.ssgproject.content_rule_sysctl_kernel_kptr_restrict",
      "xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space",
      "xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope"
    ],
    "suppressedConflictRuleIds": [],
    "baselineResultCount": 46,
    "verificationResultCount": 46,
    "baselineMissingRuleIds": [],
    "baselineUnexpectedRuleIds": [],
    "verificationMissingRuleIds": [],
    "verificationUnexpectedRuleIds": [],
    "scoreNotLower": true,
    "failedNotHigher": true,
    "noPassToFailRegressions": true,
    "improvementRequired": true,
    "improvementProven": true,
    "fipsPostReboot": {
      "required": false,
      "setupProofPassed": true,
      "nonPassRuleIds": []
    },
    "pciZeroFindings": {
      "required": false,
      "passed": true,
      "reasons": []
    },
    "runtimeProofAcceptedRuleIds": [],
    "effectiveVerificationFailed": 0,
    "reasons": []
  },
  "fipsSetupProof": null,
  "oracle9PciConvergenceProof": null,
  "oracle9Sdl1ConvergenceProof": null,
  "oracle10Sdl1ConvergenceProof": null,
  "rhel8PciConvergenceProof": null,
  "rhel10Sdl1ConvergenceProof": null,
  "almaSdl1ConvergenceProof": null,
  "al2023Sdl1ConvergenceProof": null,
  "rockySdl1ConvergenceProof": null,
  "ubuntu2204PciConvergenceProof": null,
  "ubuntu2404PciConvergenceProof": null,
  "ubuntu2404PciFinalStabilizationProof": null,
  "ubuntu2004PciConvergenceProof": null,
  "ubuntu2004PciFinalStabilizationProof": null,
  "ubuntu2004Sdl1ConvergenceProof": null,
  "ubuntu2404Sdl1ConvergenceProof": null,
  "ubuntu2604Sdl1ConvergenceProof": null,
  "ubuntu2604PciConvergenceProof": null,
  "ubuntu2604PciFinalStabilizationProof": null,
  "rebootDeferredVerification": null
}